403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.03.21.txt
 ## swap threshold exceeded
## server overview
2025-11-13.03.21 load[0] mem[68/73] mysql[1/12] httpd[45]
              total        used        free      shared  buff/cache   available
Mem:           2363        1561         103          36         698         601
Swap:          1999        1649         350
 03:21:01 up  7:18,  0 users,  load average: 0.31, 0.53, 0.91
## system overview
top - 03:21:01 up  7:18,  0 users,  load average: 0.31, 0.53, 0.91
Tasks: 226 total,   2 running, 223 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.5 us, 30.3 sy,  0.0 ni,  3.0 id,  9.1 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    99328 free,  1604640 used,   716332 buff/cache
KiB Swap:  2047996 total,   358516 free,  1689480 used.   610016 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1458852 246440   3500 S  80.0 10.2   6:27.61 /usr/sbin+
 67221 nigeria   20   0  400652  15932  10220 R  20.0  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44428   3464   1528 S  13.3  0.1   0:36.70 /usr/lib/+
   497 root      20   0   24896   1432    800 S   6.7  0.1   0:06.09 /usr/lib/+
 61317 nobody    20   0  277924  17380   3648 S   6.7  0.7   0:00.37 /usr/sbin+
 67220 pactpay   20   0  476724  16580  10916 S   6.7  0.7   0:00.01 /opt/cpan+
 67226 cloudw    20   0  352096  15232  10128 S   6.7  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.01 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.38 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:27.99 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:28.42 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.96 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.76 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.39 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   2644   2396 S   0.0  0.1   0:14.87 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    452    324 S   0.0  0.0   0:02.36 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.58 /usr/sbin+
   501 polkitd   20   0  612240    840    456 S   0.0  0.0   0:03.62 /usr/lib/+
   503 root      20   0  152780     64     20 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3068    808 S   0.0  0.1   0:00.33 queueproc+
   507 root      20   0   52852    332    244 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1340    612 S   0.0  0.1   0:13.86 /usr/bin/+
   519 nscd      20   0 1062080   1340    600 S   0.0  0.1   0:23.95 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    848    412 S   0.0  0.0   0:00.74 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3800    864 S   0.0  0.2   0:00.97 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.98 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  14036   2728 S   0.0  0.6   0:06.36 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.55 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.36 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:02.30 /usr/bin/+
   933 telegraf  20   0 5654048  33824   5656 S   0.0  1.4   0:14.70 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.58 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:03.34 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    304    212 S   0.0  0.0   0:00.76 php-fpm: +
   961 named     20   0  636988  37592   1600 S   0.0  1.6   0:15.77 /usr/sbin+
   964 root      20   0  298320   3088   2472 S   0.0  0.1   0:07.06 /usr/sbin+
   981 root      20   0  436392    404    316 S   0.0  0.0   0:00.88 php-fpm: +
   984 root      20   0  385496    464    368 S   0.0  0.0   0:00.74 php-fpm: +
   985 root      20   0  261420   6532   1672 S   0.0  0.3   0:04.12 cpsrvd (S+
   989 root      20   0  392856    424    340 S   0.0  0.0   0:00.73 php-fpm: +
   992 root      20   0 1901916 234104    632 S   0.0  9.7   0:32.41 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.77 php-fpm: +
  1006 cpanelc+  20   0   11064   4260   2352 S   0.0  0.2   0:22.24 /usr/loca+
  1075 dovenull  20   0   47264   2376   1576 S   0.0  0.1   0:00.52 dovecot/p+
  1076 dovenull  20   0   48460   2860   1584 S   0.0  0.1   0:00.48 dovecot/i+
  1077 dovecot   20   0   10320    464    344 S   0.0  0.0   0:00.13 dovecot/a+
  1078 root      20   0   10452    544    352 S   0.0  0.0   0:00.32 dovecot/l+
  1079 dovenull  20   0   47112   2356   1600 S   0.0  0.1   0:00.40 dovecot/p+
  1080 dovenull  20   0   48112   2660   1548 S   0.0  0.1   0:00.31 dovecot/i+
  1084 root      20   0   24572   2160    388 S   0.0  0.1   0:00.18 dovecot/c+
  1088 dovecot   20   0   13568    528    324 S   0.0  0.0   0:00.07 dovecot/s+
  1121 systuser  20   0  157704   2976    972 S   0.0  0.1   0:00.13 SonarPush+
  1166 dovecot   20   0   41260   1516    976 S   0.0  0.1   0:00.95 dovecot/a+
  1172 root      20   0  248152   5836   1084 S   0.0  0.2   0:05.98 /usr/loca+
  1173 wp-tool+  20   0  387556   3288   1420 S   0.0  0.1   0:00.28 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:21.83 /usr/bin/+
  1232 root      20   0  209372   9528   1656 S   0.0  0.4   0:03.47 tailwatchd
  1234 root      20   0  167452   3384   2012 S   0.0  0.1   0:00.48 dnsadmin +
  1237 root      20   0  262228  24620   6760 S   0.0  1.0   0:01.32 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.71 php-fpm: +
  1702 root      38  18  130416   1368    692 S   0.0  0.1   0:00.06 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:03.80 /usr/sbin+
  2063 root      20   0   12788    380    212 S   0.0  0.0   0:03.46 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.93 /usr/loca+
  2065 root      20   0   12808    392    216 S   0.0  0.0   0:03.25 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106404   2228 S   0.0  4.4   0:05.67 spamd chi+
  7886 root      20   0  261428  91788   1928 S   0.0  3.8   0:00.32 spamd chi+
 14740 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 21197 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 28810 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 37629 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 40730 root      20   0 1341636  11332    600 S   0.0  0.5   0:00.07 /usr/bin/+
 40769 root      20   0 1277568  12028    596 S   0.0  0.5   0:00.07 /usr/bin/+
 41331 root      20   0  123364    656    428 S   0.0  0.0   0:00.00 /usr/sbin+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.42 [kworker]
 47336 nobody    20   0  277688  18180   4008 S   0.0  0.8   0:01.27 /usr/sbin+
 50686 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 56228 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57151 nobody    20   0  277720  17604   3632 S   0.0  0.7   0:00.59 /usr/sbin+
 57153 nobody    20   0  277720  17864   3840 S   0.0  0.7   0:00.64 /usr/sbin+
 57589 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57835 nobody    20   0  277720  17356   3348 S   0.0  0.7   0:00.61 /usr/sbin+
 59867 nobody    20   0  277656  17576   3668 S   0.0  0.7   0:00.45 /usr/sbin+
 59977 nobody    20   0  277784  17696   3916 S   0.0  0.7   0:00.41 /usr/sbin+
 61092 nobody    20   0  277784  17504   3604 S   0.0  0.7   0:00.39 /usr/sbin+
 61111 nobody    20   0  277784  17676   3728 S   0.0  0.7   0:00.38 /usr/sbin+
 61299 nobody    20   0  277784  17608   3664 S   0.0  0.7   0:00.28 /usr/sbin+
 61359 nobody    20   0  277784  17612   3688 S   0.0  0.7   0:00.34 /usr/sbin+
 61376 nobody    20   0  277784  17608   3680 S   0.0  0.7   0:00.37 /usr/sbin+
 61461 nobody    20   0  277784  17892   3712 S   0.0  0.7   0:00.31 /usr/sbin+
 62478 nobody    20   0  277784  17192   3404 S   0.0  0.7   0:00.23 /usr/sbin+
 62567 nobody    20   0  277784  17552   3592 S   0.0  0.7   0:00.27 /usr/sbin+
 62599 nobody    20   0  277788  17128   3332 S   0.0  0.7   0:00.35 /usr/sbin+
 62601 nobody    20   0  277932  17400   3572 S   0.0  0.7   0:00.36 /usr/sbin+
 63136 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63902 nobody    20   0  277784  17296   3560 S   0.0  0.7   0:00.21 /usr/sbin+
 63923 nobody    20   0  277792  17044   3320 S   0.0  0.7   0:00.17 /usr/sbin+
 63924 nobody    20   0  277784  17344   3568 S   0.0  0.7   0:00.22 /usr/sbin+
 63926 nobody    20   0  277784  17560   3716 S   0.0  0.7   0:00.15 /usr/sbin+
 64033 nobody    20   0  277784  17504   3612 S   0.0  0.7   0:00.18 /usr/sbin+
 64455 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64581 nobody    20   0  277784  17240   3396 S   0.0  0.7   0:00.15 /usr/sbin+
 65241 nobody    20   0  277784  17028   3180 S   0.0  0.7   0:00.10 /usr/sbin+
 65263 nobody    20   0  277784  17100   3396 S   0.0  0.7   0:00.12 /usr/sbin+
 65283 nobody    20   0  277784  17164   3392 S   0.0  0.7   0:00.10 /usr/sbin+
 65284 nobody    20   0  277784  15772   2132 S   0.0  0.7   0:00.18 /usr/sbin+
 65285 nobody    20   0  277784  17404   3252 S   0.0  0.7   0:00.14 /usr/sbin+
 65408 nobody    20   0  277784  15764   2128 S   0.0  0.7   0:00.09 /usr/sbin+
 65708 nobody    20   0  277516  17024   3348 S   0.0  0.7   0:00.08 /usr/sbin+
 65864 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66067 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66139 nobody    20   0  277784  17072   3372 S   0.0  0.7   0:00.05 /usr/sbin+
 66158 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66184 nobody    20   0  277784  17012   3224 S   0.0  0.7   0:00.04 /usr/sbin+
 66288 nobody    20   0  277784  15852   2196 S   0.0  0.7   0:00.05 /usr/sbin+
 66335 nobody    20   0  277784  15772   2132 S   0.0  0.7   0:00.09 /usr/sbin+
 66355 nobody    20   0  277784  15764   2128 S   0.0  0.7   0:00.05 /usr/sbin+
 66356 nobody    20   0  277784  17080   3376 S   0.0  0.7   0:00.04 /usr/sbin+
 66360 mailnull  20   0   89372   8504   4124 S   0.0  0.4   0:00.00 /usr/sbin+
 66412 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 66757 nobody    20   0  277784  15760   2128 S   0.0  0.7   0:00.03 /usr/sbin+
 66778 nobody    20   0  277784  17084   3384 S   0.0  0.7   0:00.03 /usr/sbin+
 66779 nobody    20   0  277784  15764   2128 S   0.0  0.7   0:00.03 /usr/sbin+
 66790 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66803 nobody    20   0  277784  15764   2132 S   0.0  0.7   0:00.04 /usr/sbin+
 66804 nobody    20   0  277784  15760   2128 S   0.0  0.7   0:00.02 /usr/sbin+
 66805 nobody    20   0  277784  15764   2132 S   0.0  0.7   0:00.02 /usr/sbin+
 66806 nobody    20   0  277784  15760   2128 S   0.0  0.7   0:00.02 /usr/sbin+
 66828 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 67096 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 67101 nigeria   20   0  397188   8356   5032 S   0.0  0.3   0:00.02 php-fpm: +
 67116 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 67117 nobody    20   0  277384  16508   3200 S   0.0  0.7   0:00.00 /usr/sbin+
 67118 cloudw    20   0  521972  60156   6756 S   0.0  2.5   0:00.53 php-fpm: +
 67146 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 67147 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 67153 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 67155 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67156 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67157 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67159 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67160 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67161 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67162 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67163 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67164 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67165 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67167 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67169 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 67170 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 67171 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 67190 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 67191 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67192 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67193 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67196 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67197 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 67199 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67200 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67201 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67202 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 67203 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67215 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67217 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 67225 root      20   0  160220   2324   1592 R   0.0  0.1   0:00.00 top -bcn1
 67232 cloudw    20   0  351952  15236  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 76167 root      20   0  182648  10148   1104 S   0.0  0.4   0:11.71 lfd - sle+
 83762 root      20   0  123364    640    416 S   0.0  0.0   0:00.00 /usr/sbin+
 94757 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:27  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:28  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root      14740  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/0:0]
root      21197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      28810  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:2]
root      37629  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/u200:1]
root      50686  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root      56228  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/1:4]
root      57589  0.0  0.0      0     0 ?        S    03:14   0:00  \_ [kworker/0:1]
root      63136  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/1:1]
root      64455  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:3]
root      65864  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44428  3464 ?        Ss   Nov12   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  2644 ?        Ss   Nov12   0:14 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   452 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:06 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    64 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3068 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   332 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1340 ?        Ss   Nov12   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1340 ?        Ssl  Nov12   0:23 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   848 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      67155  0.0  0.1 183080  2428 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67169  0.0  0.0 113284  1212 ?        Ss   03:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      67170  0.0  0.0 108052   360 ?        S    03:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      67171  0.0  0.0 113288  1520 ?        S    03:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      67235  0.0  0.0 153840  2096 ?        R    03:21   0:00  |               \_ ps auxf
root      67156  0.0  0.1 183080  2428 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67193  0.0  0.0  20164   804 ?        Ss   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      67157  0.0  0.1 183080  2428 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67196  0.0  0.0  20164   808 ?        Rs   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      67159  0.0  0.1 183080  2428 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67199  0.0  0.0  20164   804 ?        Ss   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      67160  0.0  0.1 183080  2424 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67192  0.0  0.0  20164   984 ?        Ss   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      67161  0.0  0.1 183080  2424 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67200  0.0  0.0  20164   804 ?        Ss   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67162  0.0  0.1 183080  2424 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67201  0.0  0.0  20164   808 ?        Ss   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      67163  0.0  0.0 183080  2420 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67191  0.0  0.0  20164   808 ?        Rs   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      67164  0.0  0.0 183080  2420 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67203  0.0  0.0  20164   804 ?        Ss   03:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      67165  0.0  0.0 183080  2420 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67197  0.0  0.0  20164   964 ?        Ss   03:21   0:00  |   \_ jailshell (pactpay) [67215] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67215  0.0  0.0  20164   260 ?        S    03:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67220  0.0  0.7 476724 17108 ?        S    03:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      67167  0.0  0.0 183080  2420 ?        S    03:21   0:00  \_ /usr/sbin/CROND -n
root      67202  0.0  0.0  20164   964 ?        Ss   03:21   0:00      \_ jailshell (nigeria) [67217] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67217  0.0  0.0  20164   256 ?        S    03:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67221  0.0  0.6 400652 15932 ?        S    03:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3800 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  66360  0.0  0.3  89372  8504 ?        S    03:20   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 14036 ?        Ssl  Nov12   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  2376 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2860 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   464 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   544 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2356 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48112  2660 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2160 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   528 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1516 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33824 ?       SLsl Nov12   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:03 /usr/sbin/sshd -D
root      66067  0.0  0.1 111304  4268 ?        Ss   03:20   0:00  \_ sshd: [accepted]
root      66158  0.0  0.1 111304  4264 ?        Ss   03:20   0:00  \_ sshd: [accepted]
root      66412  0.0  0.1 111304  4260 ?        Ss   03:20   0:00  \_ sshd: [accepted]
root      66790  0.0  0.1 111304  4260 ?        Ss   03:20   0:00  \_ sshd: [accepted]
root      66828  0.0  0.1 111304  4268 ?        Ss   03:20   0:00  \_ sshd: [accepted]
root      67146  0.0  0.1 111304  4272 ?        Ss   03:20   0:00  \_ sshd: [accepted]
sshd      67147  0.0  0.1 115644  2632 ?        S    03:20   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   304 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.5 636988 37592 ?        Ssl  Nov12   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 298320  3088 ?        Ssl  Nov12   0:07 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   404 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   464 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261420  6532 ?        Ss   Nov12   0:04 cpsrvd (SSL) - waiting for connections                   
root      67153  0.0  0.0      0     0 ?        Z    03:21   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   424 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 234104 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   67101  0.6  0.3 397188  8356 ?        S    03:20   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    67118 26.5  2.4 521972 60156 ?        S    03:20   0:00  \_ php-fpm: pool cloudware_ng
cpanelc+   1006  0.0  0.1  11064  4260 ?        Ss   Nov12   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2976 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5836 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.3 294720 106404 ?       S    Nov12   0:05  \_ spamd child
root       7886  0.0  3.7 261428 91788 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3288 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  9528 ?        Ss   Nov12   0:03 tailwatchd
root       1234  0.0  0.1 167452  3384 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  1.0 262228 24620 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1368 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4 10.1 1458852 246440 ?      Sl   Nov12   6:27 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:03 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12788   380 ?        S    Nov12   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12808   392 ?        S    Nov12   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47336  0.1  0.7 277688 18180 ?        S    03:06   0:01  \_ /usr/sbin/httpd -k start
nobody    57151  0.1  0.7 277720 17604 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    57153  0.1  0.7 277720 17864 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    57835  0.1  0.7 277720 17356 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
nobody    59867  0.1  0.7 277656 17576 ?        S    03:15   0:00  \_ /usr/sbin/httpd -k start
nobody    59977  0.1  0.7 277784 17696 ?        S    03:15   0:00  \_ /usr/sbin/httpd -k start
nobody    61092  0.1  0.7 277784 17504 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    61111  0.1  0.7 277784 17676 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    61299  0.1  0.7 277784 17608 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    61317  0.1  0.7 277924 17380 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    61359  0.1  0.7 277784 17612 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    61376  0.1  0.7 277784 17608 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    61461  0.1  0.7 277784 17892 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    62478  0.1  0.7 277784 17192 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    62567  0.1  0.7 277784 17552 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    62599  0.1  0.7 277788 17128 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
cloudw    67226  0.0  0.6 352096 15232 ?        S    03:21   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    62601  0.1  0.7 277932 17400 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    63902  0.1  0.7 277784 17296 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    63923  0.1  0.7 277792 17044 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    63924  0.1  0.7 277784 17344 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    63926  0.1  0.7 277784 17560 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    64033  0.1  0.7 277784 17504 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
cloudw    67232  0.0  0.6 352096 15236 ?        S    03:21   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    64581  0.1  0.7 277784 17240 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65241  0.1  0.7 277784 17028 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    67190  0.0  0.6 352096 15232 ?        S    03:21   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    65263  0.1  0.7 277784 17100 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65283  0.1  0.7 277784 17164 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65284  0.2  0.6 277784 15772 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65285  0.1  0.7 277784 17404 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65408  0.1  0.6 277784 15764 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    65708  0.1  0.7 277516 17024 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    66139  0.1  0.7 277784 17072 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66184  0.0  0.7 277784 17012 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66288  0.1  0.6 277784 15852 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66335  0.2  0.6 277784 15772 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66355  0.1  0.6 277784 15764 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66356  0.0  0.7 277784 17080 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66757  0.1  0.6 277784 15760 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66778  0.1  0.7 277784 17084 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66779  0.1  0.6 277784 15764 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66803  0.2  0.6 277784 15764 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66804  0.1  0.6 277784 15760 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66805  0.1  0.6 277784 15764 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    66806  0.1  0.6 277784 15760 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67096  0.0  0.6 277640 15524 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67116  0.0  0.6 277640 15524 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    67117  0.0  0.6 277384 16508 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.4 182648 10148 ?        Ss   00:00   0:11 lfd - sleeping
root      83762  0.0  0.0 123364   640 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
root      40730  0.0  0.4 1341636 11332 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      40769  0.0  0.4 1277568 12028 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      41331  0.0  0.0 123364   656 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 26282  Threads: 3  Questions: 2337144  Slow queries: 0  Opens: 8545  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.925
*************************** 1. row ***************************
     Id: 33884
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 2. row ***************************
     Id: 33885
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 33889
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 4. row ***************************
     Id: 33890
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
## network stats
      1 104.222.171.12 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 127.0.0.1 TIME_WAIT
      1 15.235.98.132 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.201.198.159 TIME_WAIT
      1 34.208.6.97 TIME_WAIT
      1 54.39.89.128 TIME_WAIT
      1 66.249.64.103 TIME_WAIT
      1 66.249.64.105 TIME_WAIT
      1 66.249.64.110 TIME_WAIT
      1 66.249.64.15 TIME_WAIT
      1 66.249.64.167 TIME_WAIT
      1 66.249.64.174 TIME_WAIT
      1 66.249.64.224 TIME_WAIT
      1 66.249.64.229 TIME_WAIT
      1 66.249.64.234 TIME_WAIT
      1 66.249.64.36 TIME_WAIT
      1 66.249.64.37 TIME_WAIT
      1 66.249.64.39 TIME_WAIT
      1 66.249.64.44 TIME_WAIT
      1 66.249.70.107 TIME_WAIT
      1 66.249.70.139 TIME_WAIT
      1 66.249.70.170 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 92.112.57.205 TIME_WAIT
      1 92.71.34.99 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 66.249.64.70 TIME_WAIT
      2 66.249.70.133 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 03:21:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 17 minutes 57 seconds
   Server load: 0.31 0.53 0.91
   Total accesses: 154924 - Total Traffic: 4.0 GB - Total Duration: 82777238
   CPU Usage: u7.05 s6.76 cu1995.81 cs1633.59 - 13.9% CPU load
   5.9 requests/sec - 160.9 kB/second - 27.3 kB/request - 534.309 ms/request
   45 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KKKKKKWKKKKKKKKKKKKKKK.KKKWKKKKKKKKKK.KWKKKK_K........W.K.......
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req   Dur   Conn Child  Slot     Client     Protocol            VHost                            Request
   0-0  57835 1/99/6575  K 2.84 0   122 3485387 7.4  3.89  168.24 60.87.216.97  http/1.1 schoolplus.cloudware.ng:443 GET /?p=2282566266 HTTP/1.1
   1-0  66757 1/4/6509   K 0.09 4   342 3186748 30.0 0.12  164.22 66.249.70.70  http/1.1 schoolplus.cloudware.ng:80  GET /?p=218335260 HTTP/1.1
   2-0  65241 1/16/6490  K 0.39 0   335 3555513 30.8 0.46  183.71 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80  GET /?p=4182740601 HTTP/1.1
   3-0  47336 2/207/6608 K 5.65 3   353 3566144 59.9 8.19  186.95 66.249.70.38  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3873313056 HTTP/1.1
   4-0  66778 1/5/6388   K 0.09 4   318 3300082 30.7 0.13  167.15 192.178.4.99  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2985218069 HTTP/1.1
   5-0  61092 1/62/6377  K 1.74 1   661 3411134 27.0 1.74  191.46 66.249.64.224 http/1.1 cloudware.ng:443            GET / HTTP/1.1
   6-0  66139 0/8/6317   W 0.18 0   0   3266764 0.0  0.22  165.07 66.249.70.35  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3303879307 HTTP/1.1
   7-0  66779 1/5/7023   K 0.12 0   272 3562379 29.5 0.15  186.95 66.249.64.129 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3156019129 HTTP/1.1
   8-0  63902 1/34/5618  K 0.94 3   278 2983931 29.5 0.95  143.86 66.249.70.67  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2502140906 HTTP/1.1
   9-0  63923 1/28/5880  K 0.75 1   270 3153730 29.3 0.80  155.32 66.249.64.224 http/1.1 schoolplus.cloudware.ng:80  GET /?p=2022535316 HTTP/1.1
   10-0 66803 1/6/5975   K 0.15 0   289 3106007 29.2 0.18  161.43 66.249.64.231 http/1.1 schoolplus.cloudware.ng:80  GET /?p=4185955335 HTTP/1.1
   11-0 67096 1/1/6215   K 0.00 2   337 3275006 29.6 0.03  191.38 66.249.70.160 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3394751650 HTTP/1.1
   12-0 63924 2/37/5965  K 0.98 3   407 3030869 61.5 1.03  144.99 66.249.70.4   http/1.1 schoolplus.cloudware.ng:80  GET /?p=1124490580 HTTP/1.1
   13-0 66804 1/4/4957   K 0.08 1   314 2472994 31.9 0.12  119.47 66.249.70.161 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3559635831 HTTP/1.1
   14-0 65263 1/20/5366  K 0.50 2   308 2905293 31.4 0.56  155.01 66.249.70.107 http/1.1 schoolplus.cloudware.ng:80  GET /?p=4287617972 HTTP/1.1
   15-0 61111 2/64/4544  K 1.70 3   410 2439518 60.2 1.76  120.88 66.249.64.11  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2675061847 HTTP/1.1
   16-0 59867 1/73/6333  K 2.05 3   339 3181482 30.8 2.03  164.46 66.249.70.1   http/1.1 schoolplus.cloudware.ng:80  GET /?p=3134506702 HTTP/1.1
   17-0 63926 2/26/6356  K 0.60 1   282 3437379 58.6 0.73  182.58 66.249.64.12  http/1.1 schoolplus.cloudware.ng:80  GET /?p=30538126 HTTP/1.1
   18-0 66805 1/4/3707   K 0.08 3   363 2135713 29.6 0.12  97.72  66.249.64.6   http/1.1 schoolplus.cloudware.ng:80  GET /?p=926751842 HTTP/1.1
   19-0 66806 1/4/4304   K 0.07 0   290 2422769 31.1 0.12  115.02 66.249.64.170 http/1.1 schoolplus.cloudware.ng:80  GET /?p=1774135110 HTTP/1.1
   20-0 67116 1/1/3096   K 0.00 1   400 1680191 31.2 0.03  76.02  66.249.64.40  http/1.1 schoolplus.cloudware.ng:80  GET /?p=839394778 HTTP/1.1
   21-0 67117 1/1/3096   K 0.00 0   949 1732823 31.4 0.03  82.08  45.153.101.74 http/1.1 nigeriadecide.org:443       GET /INDEPENDENT_DEMOCRATS.php HTTP/1.1
   22-0 -     0/0/3212   . 0.00 23  0   1793930 0.0  0.00  95.46  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 62478 2/40/2556  K 1.01 1   311 1445999 62.4 1.06  59.56  66.249.70.196 http/1.1 schoolplus.cloudware.ng:80  GET /?p=796768812 HTTP/1.1
   24-0 65283 1/17/3336  K 0.42 2   289 1589796 31.1 0.45  78.18  66.249.64.130 http/1.1 schoolplus.cloudware.ng:80  GET /?p=1241781029 HTTP/1.1
   25-0 65284 1/26/2522  K 0.75 2   400 1315278 33.3 0.76  66.26  66.249.70.102 http/1.1 schoolplus.cloudware.ng:80  GET /?p=1029987883 HTTP/1.1
   26-0 64033 1/31/1622  W 0.75 0   0   935005  30.1 0.77  42.65  66.249.64.132 http/1.1 schoolplus.cloudware.ng:80  GET /?p=2659156658 HTTP/1.1
   27-0 65285 1/24/1695  K 0.63 3   339 1006033 28.8 0.64  44.24  66.249.64.15  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2295489886 HTTP/1.1
   28-0 61299 1/48/2655  K 1.25 4   414 1311066 32.3 1.34  65.29  66.249.64.128 http/1.1 schoolplus.cloudware.ng:80  GET /?p=454138240 HTTP/1.1
   29-0 61317 2/60/1213  K 1.62 0   267 729521  59.2 1.65  32.46  66.249.70.128 http/1.1 schoolplus.cloudware.ng:80  GET /?p=4037162326 HTTP/1.1
   30-0 64581 1/25/1907  K 0.65 3   371 1040963 30.1 0.66  45.42  66.249.64.228 http/1.1 schoolplus.cloudware.ng:80  GET /?p=1319591946 HTTP/1.1
   31-0 57151 1/97/1347  K 2.71 1   272 787968  29.2 2.87  35.97  192.178.4.102 http/1.1 schoolplus.cloudware.ng:80  GET /?p=307757974 HTTP/1.1
   32-0 61359 1/56/1073  K 1.50 2   350 664811  29.0 1.52  26.47  66.249.70.106 http/1.1 schoolplus.cloudware.ng:80  GET /?p=357230595 HTTP/1.1
   33-0 65408 1/15/1218  K 0.42 4   356 741557  29.0 0.45  31.14  66.249.70.37  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3554924255 HTTP/1.1
   34-0 65708 1/15/991   K 0.33 0   268 613005  29.5 0.35  24.51  66.249.70.34  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1215577255 HTTP/1.1
   35-0 61376 1/61/675   K 1.68 0   281 316361  29.6 1.67  14.45  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3475880299 HTTP/1.1
   36-0 66184 1/8/485    K 0.17 1   274 307093  29.5 0.21  12.13  66.249.64.13  http/1.1 schoolplus.cloudware.ng:80  GET /?p=923966712 HTTP/1.1
   37-0 -     0/0/558    . 0.00 25  0   468744  0.0  0.00  14.00  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 57153 1/108/468  K 2.85 0   271 292866  29.9 3.84  13.73  66.249.70.173 http/1.1 schoolplus.cloudware.ng:80  GET /?p=3767396978 HTTP/1.1
   39-0 59977 0/69/313   W 1.89 0   0   180727  0.0  1.95  8.46   ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   40-0 66288 1/8/1247   K 0.18 2   400 733105  31.4 0.24  35.61  66.249.64.168 http/1.1 schoolplus.cloudware.ng:80  GET /?p=432434490 HTTP/1.1
   41-0 61461 1/50/255   K 1.36 2   263 148660  29.7 1.39  6.63   66.249.64.65  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3214861055 HTTP/1.1
   42-0 66335 1/15/152   K 0.40 4   360 86734   30.3 0.44  3.79   66.249.64.7   http/1.1 schoolplus.cloudware.ng:80  GET /?p=1778719428 HTTP/1.1
   43-0 66355 1/8/181    K 0.20 4   365 107183  30.2 0.24  5.09   66.249.70.2   http/1.1 schoolplus.cloudware.ng:80  GET /?p=476568084 HTTP/1.1
   44-0 62567 0/46/192   _ 1.21 0   361 99206   0.0  1.37  5.37   192.178.4.98  http/1.1 schoolplus.cloudware.ng:80  GET /?p=907983792 HTTP/1.1
   45-0 66356 1/7/141    K 0.15 2   350 79920   29.5 0.19  4.16   66.249.70.66  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3972475827 HTTP/1.1
   46-0 -     0/0/137    . 0.00 91  0   80255   0.0  0.00  3.86   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/393    . 0.00 155 0   216361  0.0  0.00  10.88  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/93     . 0.00 153 0   59029   0.0  0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/74     . 0.00 89  0   47555   0.0  0.00  1.95   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/88     . 0.00 90  0   49089   0.0  0.00  4.54   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/64     . 0.00 152 0   37603   0.0  0.00  1.60   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/47     . 0.00 151 0   25772   0.0  0.00  1.07   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/37     . 0.00 191 0   19007   0.0  0.00  0.75   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 62599 1/55/113   W 1.55 0   0   61048   31.1 1.58  2.64   66.249.64.102 http/1.1 schoolplus.cloudware.ng:80  GET /?p=4213107221 HTTP/1.1
   55-0 -     0/0/24     . 0.00 185 0   8815    0.0  0.00  0.37   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 62601 1/59/70    K 1.64 2   362 39908   30.1 1.66  1.79   66.249.70.71  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1303741579 HTTP/1.1
   57-0 -     0/0/71     . 0.00 27  0   45380   0.0  0.00  1.88   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 305
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 21 seconds, (range: 2...64)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 39418
   total entries replaced since starting: 0
   total entries expired since starting: 39090
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 189 miss
   total removes since starting: 23 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit