403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.54.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.54 load[0] mem[60/71] mysql[3/8] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1333         213          30         815         821
Swap:          1999        1650         349
 02:54:01 up  6:51,  0 users,  load average: 0.20, 0.33, 0.43
## system overview
top - 02:54:01 up  6:51,  0 users,  load average: 0.20, 0.33, 0.43
Tasks: 208 total,   3 running, 204 sleeping,   0 stopped,   1 zombie
%Cpu(s): 48.4 us, 22.6 sy,  0.0 ni, 25.8 id,  0.0 wa,  0.0 hi,  3.2 si,  0.0 st
KiB Mem :  2420300 total,   213172 free,  1371628 used,   835500 buff/cache
KiB Swap:  2047996 total,   358108 free,  1689888 used.   835396 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 233568   3188 S  68.8  9.7   5:53.99 /usr/sbin+
 34267 nigeria   20   0  400652  15936  10220 R  18.8  0.7   0:00.05 /opt/cpan+
 32463 nobody    20   0  277824  18368   3860 S   6.2  0.8   0:00.17 /usr/sbin+
 34288 root      20   0  160220   2064   1580 R   6.2  0.1   0:00.01 top -bcn1
 34296 cloudsms  20   0  400652  15408  10000 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3440   1516 S   0.0  0.1   0:34.43 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.77 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.25 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:25.90 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.00 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:27.25 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.78 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.25 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   5440   5192 S   0.0  0.2   0:14.10 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    452    324 S   0.0  0.0   0:02.25 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.69 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.54 /usr/sbin+
   501 polkitd   20   0  612240    840    456 S   0.0  0.0   0:03.39 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3128    868 S   0.0  0.1   0:00.32 queueproc+
   507 root      20   0   52852    160     72 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:12.93 /usr/bin/+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:21.64 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    848    412 S   0.0  0.0   0:00.70 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3740    804 S   0.0  0.2   0:00.91 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   658 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.97 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13916   2668 S   0.0  0.6   0:05.99 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.51 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.34 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.17 /usr/bin/+
   933 telegraf  20   0 5654048  34132   5804 S   0.0  1.4   0:13.75 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.55 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:03.17 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    352    260 S   0.0  0.0   0:00.73 php-fpm: +
   961 named     20   0  636988  36460   1752 S   0.0  1.5   0:14.53 /usr/sbin+
   964 root      20   0  290128   5424   4812 S   0.0  0.2   0:06.65 /usr/sbin+
   981 root      20   0  436392    384    296 S   0.0  0.0   0:00.83 php-fpm: +
   984 root      20   0  385496    464    368 S   0.0  0.0   0:00.70 php-fpm: +
   985 root      20   0  261420   6572   1744 S   0.0  0.3   0:03.94 cpsrvd (S+
   989 root      20   0  392856    332    248 S   0.0  0.0   0:00.69 php-fpm: +
   992 root      20   0 1901916 234328    644 S   0.0  9.7   0:32.41 /usr/loca+
  1000 root      20   0  397344   1876    600 S   0.0  0.1   0:03.43 php-fpm: +
  1006 cpanelc+  20   0   10656   3672   2280 S   0.0  0.2   0:20.50 /usr/loca+
  1075 dovenull  20   0   47264   1960   1172 S   0.0  0.1   0:00.48 dovecot/p+
  1076 dovenull  20   0   48460   2880   1608 S   0.0  0.1   0:00.42 dovecot/i+
  1077 dovecot   20   0   10320    256    148 S   0.0  0.0   0:00.13 dovecot/a+
  1078 root      20   0   10452    548    356 S   0.0  0.0   0:00.29 dovecot/l+
  1079 dovenull  20   0   47112   2204   1456 S   0.0  0.1   0:00.38 dovecot/p+
  1080 dovenull  20   0   48000   2612   1544 S   0.0  0.1   0:00.29 dovecot/i+
  1084 root      20   0   24572   2248    476 S   0.0  0.1   0:00.17 dovecot/c+
  1088 dovecot   20   0   13568    572    368 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.12 SonarPush+
  1166 dovecot   20   0   41260   1488    948 S   0.0  0.1   0:00.92 dovecot/a+
  1172 root      20   0  248152   5868   1112 S   0.0  0.2   0:05.79 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.27 /usr/bin/+
  1174 wp-tool+  20   0  410616  17956   1400 S   0.0  0.7   0:20.48 /usr/bin/+
  1232 root      20   0  209372   9640   1804 S   0.0  0.4   0:03.17 tailwatchd
  1234 root      20   0  167452   3400   2028 S   0.0  0.1   0:00.46 dnsadmin +
  1237 root      20   0  183900   5280   2044 S   0.0  0.2   0:01.15 cpdavd - +
  1642 root      20   0  299272    456    292 S   0.0  0.0   0:00.66 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:03.26 /usr/sbin+
  2063 root      20   0   12828    380    212 S   0.0  0.0   0:03.10 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.63 /usr/loca+
  2065 root      20   0   12864    392    216 S   0.0  0.0   0:02.91 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106516   2244 S   0.0  4.4   0:05.53 spamd chi+
  7886 root      20   0  261428  92072   1960 S   0.0  3.8   0:00.32 spamd chi+
  8440 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9293 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 10311 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 14740 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21197 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22937 nobody    20   0  277780  18592   3988 S   0.0  0.8   0:01.07 /usr/sbin+
 23292 root      20   0  183048   1376    848 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    616    436 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 26683 nobody    20   0  277780  18508   3912 S   0.0  0.8   0:00.79 /usr/sbin+
 28537 nobody    20   0  277568  17936   3492 S   0.0  0.7   0:00.69 /usr/sbin+
 28596 nobody    20   0  277568  17424   3684 S   0.0  0.7   0:00.65 /usr/sbin+
 28710 nobody    20   0  277960  18876   4248 S   0.0  0.8   0:00.50 /usr/sbin+
 28810 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29638 nobody    20   0  277568  17924   3764 S   0.0  0.7   0:00.54 /usr/sbin+
 29658 nobody    20   0  277536  17428   3652 S   0.0  0.7   0:00.57 /usr/sbin+
 30668 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30670 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31139 nobody    20   0  277824  18052   3768 S   0.0  0.7   0:00.29 /usr/sbin+
 31156 nobody    20   0  277956  17596   3684 S   0.0  0.7   0:00.32 /usr/sbin+
 31468 nobody    20   0  277568  17676   3812 S   0.0  0.7   0:00.34 /usr/sbin+
 31590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32451 nobody    20   0  277908  17388   3568 S   0.0  0.7   0:00.19 /usr/sbin+
 33226 nobody    20   0  277540  17012   3344 S   0.0  0.7   0:00.14 /usr/sbin+
 33245 nobody    20   0  277900  17448   3564 S   0.0  0.7   0:00.10 /usr/sbin+
 33246 nobody    20   0  277572  16980   3392 S   0.0  0.7   0:00.10 /usr/sbin+
 33389 nobody    20   0  277960  17408   3556 S   0.0  0.7   0:00.10 /usr/sbin+
 33390 nobody    20   0  277568  17144   3616 S   0.0  0.7   0:00.10 /usr/sbin+
 33448 nobody    20   0  277568  15588   2140 S   0.0  0.6   0:00.11 /usr/sbin+
 33454 nobody    20   0  277568  15688   2172 S   0.0  0.6   0:00.12 /usr/sbin+
 33659 nigeria   20   0  397984   8696   5116 S   0.0  0.4   0:00.04 php-fpm: +
 33989 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 34157 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 34170 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 34171 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 34189 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 34190 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 34191 nobody    20   0  277416  15264   2016 S   0.0  0.6   0:00.00 /usr/sbin+
 34192 nobody    20   0  277416  15268   2020 S   0.0  0.6   0:00.00 /usr/sbin+
 34203 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 34209 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 34211 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34212 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34213 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34214 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34215 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34216 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34217 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34218 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34219 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34220 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34221 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34223 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34226 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 34227 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 34228 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 34229 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 34233 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 34234 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 34235 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34236 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 34237 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 34238 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34239 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 34240 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34241 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34242 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 34244 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 34245 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 34250 pactpay   20   0  476724  17488  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 34261 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 34273 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 34290 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 34291 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 34292 cloudsms  20   0  397280  12240   8328 R   0.0  0.5   0:00.00 /opt/cpan+
 34294 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 34295 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.40 [kworker]
 76167 root      20   0  182516   9680   1104 S   0.0  0.4   0:09.94 lfd - sle+
 82830 root      20   0 1276100  10496    596 S   0.0  0.4   0:00.09 /usr/bin/+
 82872 root      20   0 1277312  11672    596 S   0.0  0.5   0:00.07 /usr/bin/+
 83762 root      20   0  123364    644    420 S   0.0  0.0   0:00.00 /usr/sbin+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:27  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root        658  0.0  0.0      0     0 ?        D    02:20   0:00  \_ [kworker/u200:0]
root       8440  0.0  0.0      0     0 ?        D    02:28   0:00  \_ [kworker/0:1]
root       9293  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:3]
root      10311  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:4]
root      14740  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/0:0]
root      21197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      28810  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:2]
root      30668  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:3]
root      30670  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:4]
root      31590  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  5440 ?        Ss   Nov12   0:14 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   452 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3128 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   160 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:21 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   848 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1376 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   616 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      34209  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34226  0.0  0.0 113284  1212 ?        Ss   02:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      34227  0.0  0.0 108052   352 ?        S    02:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      34229  0.0  0.0 113288  1516 ?        S    02:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      34297  0.0  0.0 153840  2088 ?        R    02:54   0:00  |               \_ ps auxf
root      34211  0.0  0.1 183080  2428 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34245  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      34212  0.0  0.1 183080  2428 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34244  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      34213  0.0  0.1 183080  2428 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34241  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      34214  0.0  0.1 183080  2428 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34240  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      34215  0.0  0.1 183080  2428 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34234  0.0  0.0  20164   988 ?        Ss   02:54   0:00  |   \_ jailshell (cloudsms) [34294] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  34294  0.0  0.0  20164   264 ?        S    02:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  34295  0.0  0.0 113284  1208 ?        S    02:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  34296  0.0  0.6 400652 15408 ?        S    02:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      34216  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34242  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      34217  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34237  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      34218  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34238  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      34219  0.0  0.0 183080  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34235  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      34221  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34228  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (pactpay) [34233] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   34233  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   34250  0.0  0.7 476724 17488 ?        S    02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      34223  0.0  0.0 183080  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      34239  0.0  0.0  20164   964 ?        Ss   02:54   0:00      \_ jailshell (nigeria) [34261] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   34261  0.0  0.0  20164   260 ?        S    02:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   34267  0.0  0.6 400652 15936 ?        S    02:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3740 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13916 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1960 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2880 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   256 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   548 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2204 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2612 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2248 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   572 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1488 ?        S    Nov12   0:00  \_ dovecot/auth
root      33989  0.0  0.1  41052  2728 ?        S    02:53   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34132 ?       SLsl Nov12   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:03 /usr/sbin/sshd -D
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   352 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.5 636988 36460 ?        Ssl  Nov12   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 290128  5424 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   384 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   464 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261420  6572 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      34203  0.0  0.0      0     0 ?        Z    02:54   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 234328 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1876 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   33659  0.0  0.3 397984  8696 ?        S    02:53   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3672 ?        Ss   Nov12   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5868 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106516 ?       S    Nov12   0:05  \_ spamd child
root       7886  0.0  3.8 261428 92072 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17956 ?        Ss   Nov12   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  9640 ?        Ss   Nov12   0:03 tailwatchd
root       1234  0.0  0.1 167452  3400 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  5280 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   456 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  9.6 1457796 233568 ?      Sl   Nov12   5:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:03 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12828   380 ?        S    Nov12   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12864   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    22937  0.1  0.7 277780 18592 ?        S    02:44   0:01  \_ /usr/sbin/httpd -k start
nobody    26683  0.1  0.7 277780 18508 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
cloudw    34273  0.0  0.6 352096 15232 ?        S    02:54   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    28537  0.1  0.7 277568 17936 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    28596  0.1  0.7 277568 17424 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    28710  0.1  0.7 277960 18876 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    29638  0.1  0.7 277568 17924 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    29658  0.1  0.7 277536 17428 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    31139  0.1  0.7 277824 18052 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    31156  0.1  0.7 277956 17596 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    31468  0.1  0.7 277568 17676 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    32451  0.1  0.7 277908 17388 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    32463  0.1  0.7 277824 18368 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    33226  0.2  0.7 277540 17012 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    33245  0.1  0.7 277900 17448 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    33246  0.1  0.7 277572 16980 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    33389  0.1  0.7 277960 17408 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    33390  0.1  0.7 277568 17144 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    33448  0.1  0.6 277568 15588 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    33454  0.2  0.6 277568 15688 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34157  0.0  0.6 277640 15528 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34170  0.0  0.6 277640 15520 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34171  0.0  0.6 277416 15264 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34189  0.0  0.6 277416 15264 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34190  0.0  0.6 277416 15264 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34191  0.0  0.6 277416 15264 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    34192  0.0  0.6 277416 15268 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182516  9680 ?        Ss   00:00   0:09 lfd - sleeping
root      82830  0.0  0.4 1276100 10496 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11672 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   644 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 24662  Threads: 5  Questions: 2115840  Slow queries: 0  Opens: 7999  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.793
*************************** 1. row ***************************
     Id: 30562
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 30566
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30573
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 109.199.118.129 TIME_WAIT
      1 114.119.133.35 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.36 TIME_WAIT
      1 20.90.7.147 TIME_WAIT
      1 41.158.142.231 TIME_WAIT
      1 54.39.136.51 TIME_WAIT
      1 54.39.6.62 TIME_WAIT
      1 66.249.64.99 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.68 TIME_WAIT
      1 66.249.70.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:54:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 50 minutes 58 seconds
   Server load: 0.20 0.33 0.43
   Total accesses: 139372 - Total Traffic: 3.6 GB - Total Duration: 72119963
   CPU Usage: u5 s5.14 cu1792.91 cs1459.96 - 13.2% CPU load
   5.65 requests/sec - 154.9 kB/second - 27.4 kB/request - 517.464 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

KKKKKKKKKKKKKKKKKKKKW.KK.W..K......K............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  28537 1/112/6170 K 3.14 1    278 3199693 31.2   3.18  157.43 66.249.64.230 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1342094
   1-0  31139 1/52/6107  K 1.61 4    593 2934770 2582.7 3.82  155.89 20.90.7.145   http/1.1 oysipa.oyostate.gov.ng:443 GET /download_documents/UPDATED-FISCAL-COMMITMENT-AND-CONTINGEN
   2-0  34157 1/1/6105   K 0.00 3    310 3272415 31.4   0.03  174.44 66.249.64.163 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2741016902 HTTP/1.1
   3-0  34170 1/1/6177   K 0.00 2    327 3243660 31.4   0.03  174.89 66.249.64.169 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3166804268 HTTP/1.1
   4-0  29638 1/92/5958  K 2.37 3    270 3005674 29.2   2.48  156.72 66.249.70.1   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1793265
   5-0  28596 1/106/5975 K 2.90 3    321 3137182 35.6   2.94  182.12 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=3687446882 HTTP/1.1
   6-0  28710 1/89/5907  K 2.06 3    296 2985242 30.3   2.22  154.95 192.178.4.105 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2356903
   7-0  33226 1/23/6645  K 0.62 4    340 3294088 29.9   0.65  177.61 66.249.70.8   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1544308
   8-0  33245 1/20/5245  K 0.41 3    282 2717594 30.4   0.43  135.26 66.249.64.103 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3616646764 HTTP/1.1
   9-0  34171 1/1/5486   K 0.00 2    415 2865497 30.4   0.03  145.67 192.178.4.103 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=276537
   10-0 34189 1/1/5549   K 0.00 1    360 2815907 29.1   0.03  151.43 66.249.64.167 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1253096
   11-0 33246 1/18/5805  K 0.42 3    259 2991286 29.1   0.46  181.59 66.249.70.1   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2600887
   12-0 34190 1/1/5571   K 0.00 1    302 2748414 31.1   0.03  136.26 66.249.70.7   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=694832
   13-0 31156 2/55/4641  K 1.35 3    277 2236348 60.9   1.44  110.30 66.249.64.106 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2417003
   14-0 22937 1/182/4893 K 4.71 2    308 2624614 31.4   4.80  143.49 66.249.64.42  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1211486
   15-0 34191 1/1/4183   K 0.00 1    273 2185349 30.6   0.03  110.10 66.249.64.98  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=165707
   16-0 31468 1/56/5918  K 1.45 3    299 2859274 30.2   1.52  153.46 66.249.64.233 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2373584
   17-0 26683 1/134/5958 K 3.56 0    343 3140636 29.8   4.95  172.24 66.249.70.163 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1538752
   18-0 34192 1/1/3311   K 0.00 1    277 1839480 29.7   0.03  88.63  192.178.4.98  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=867717
   19-0 32451 1/35/3932  K 0.84 0    334 2153471 30.9   0.89  104.44 66.249.64.102 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2247932
   20-0 29658 0/92/2735  W 2.57 0    0   1425119 0.0    2.61  67.90  66.249.64.160 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2416997
   21-0 -     0/0/2749   . 0.00 41   0   1488793 0.0    0.00  74.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 32463 1/31/2803  K 0.70 0    319 1538957 31.6   0.74  84.23  66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=763731
   23-0 33389 1/17/2153  K 0.44 0    264 1175169 30.5   0.49  50.41  66.249.70.101 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1103955
   24-0 -     0/0/3021   . 0.00 47   0   1379740 0.0    0.00  70.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 33390 0/18/2186  W 0.47 0    0   1073621 0.0    0.51  57.15  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   26-0 -     0/0/1276   . 0.00 48   0   710759  0.0    0.00  33.34  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1286   . 0.00 42   0   722393  0.0    0.00  33.74  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 33448 1/19/2316  K 0.51 4    340 1083871 29.9   0.56  57.12  66.249.70.110 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1103966
   29-0 -     0/0/923    . 0.00 13   0   514844  0.0    0.00  24.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1536   . 0.00 46   0   788431  0.0    0.00  35.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/1052   . 0.00 16   0   592368  0.0    0.00  27.79  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/784    . 0.00 52   4   478294  0.0    0.00  19.46  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/961    . 0.00 50   0   560665  0.0    0.00  24.73  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/711    . 0.00 27   0   414910  0.0    0.00  18.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 33454 2/22/423   K 0.57 2    279 177766  60.6   0.63  8.79   66.249.70.160 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2363319
   36-0 -     0/0/273    . 0.00 43   0   149226  0.0    0.00  6.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/315    . 0.00 1611 0   299040  0.0    0.00  8.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/237    . 0.00 1549 0   142498  0.0    0.00  5.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/106    . 0.00 1749 0   54836   0.0    0.00  2.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1131   . 0.00 1726 0   659515  0.0    0.00  32.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/89     . 0.00 1646 0   44408   0.0    0.00  2.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00 1747 0   6280    0.0    0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/62     . 0.00 1713 0   32429   0.0    0.00  1.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/83     . 0.00 1667 0   37187   0.0    0.00  2.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 1753 0   2241    0.0    0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/7      . 0.00 1752 0   2520    0.0    0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/292    . 0.00 1644 0   155098  0.0    0.00  7.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/36     . 0.00 1615 0   23094   0.0    0.00  0.88   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/5      . 0.00 1748 0   2208    0.0    0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00 1722 0   32174   0.0    0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00 1743 0   3966    0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00 1647 0   18976   0.0    0.00  0.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/35     . 0.00 1721 0   18367   0.0    0.00  0.71   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/58     . 0.00 1728 0   25317   0.0    0.00  1.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/21     . 0.00 1669 0   7335    0.0    0.00  0.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/11     . 0.00 1740 0   3060    0.0    0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 5220 0   23864   0.0    0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 414
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 21 seconds, (range: 1...131)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 35501
   total entries replaced since starting: 0
   total entries expired since starting: 35064
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 183 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit