403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-14.01.09.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-14.01.09 load[0] mem[81/41] mysql[5/5] httpd[38]
              total        used        free      shared  buff/cache   available
Mem:           2363        1896          71          17         396         297
Swap:          1999         894        1105
 01:09:02 up 9 min,  0 users,  load average: 0.64, 0.54, 0.40
## system overview
top - 01:09:02 up 9 min,  0 users,  load average: 0.64, 0.54, 0.40
Tasks: 221 total,   6 running, 213 sleeping,   0 stopped,   2 zombie
%Cpu(s): 75.0 us, 21.9 sy,  0.0 ni,  0.0 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    80172 free,  1943564 used,   396564 buff/cache
KiB Swap:  2047996 total,  1130748 free,   917248 used.   302936 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1748 mysql     20   0 1457012 190956   3956 S 118.8  7.9   0:07.91 /usr/sbin+
 13084 nigeria   20   0  404052  16144  10384 R  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44264   3396   1560 S   6.2  0.1   0:01.55 /usr/lib/+
    36 root      20   0       0      0      0 S   6.2  0.0   0:05.38 [kswapd0]
 13122 cloudw    20   0  355492  15428  10292 S   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:00.69 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.34 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.45 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   3860   3556 S   0.0  0.2   0:00.35 /usr/lib/+
   383 root      20   0   45352    644    496 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    624    492 S   0.0  0.0   0:00.04 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   486 root      20   0   21540    580    468 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   52852    520    516 S   0.0  0.0   0:00.01 /usr/sbin+
   501 polkitd   20   0  610540   1276    924 S   0.0  0.1   0:00.10 /usr/lib/+
   502 root      20   0   24604   1308    976 S   0.0  0.1   0:00.16 /usr/lib/+
   503 root      20   0  224148   5744   1096 S   0.0  0.2   0:00.08 queueproc+
   504 dbus      20   0   58400   1424    888 S   0.0  0.1   0:00.37 /usr/bin/+
   510 nscd      20   0 1064132   1472    816 S   0.0  0.1   0:00.70 /usr/sbin+
   513 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   514 rpc       20   0   69256    316    208 S   0.0  0.0   0:00.01 /sbin/rpc+
   532 root      20   0    4388    304    300 S   0.0  0.0   0:00.00 /usr/sbin+
   533 root      20   0  195208    244    244 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0  152780    396    384 S   0.0  0.0   0:00.00 /usr/sbin+
   559 root      20   0   24208    180    180 S   0.0  0.0   0:00.00 /usr/sbin+
   560 root      20   0  124480    736    568 S   0.0  0.0   0:00.01 /usr/sbin+
   572 root      20   0  114704    412    412 S   0.0  0.0   0:00.02 /bin/bash
   573 root      20   0  108296    360    356 S   0.0  0.0   0:00.00 /sbin/age+
   599 mailnull  20   0   88988   3728    772 S   0.0  0.2   0:00.02 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.12 [loop0]
   680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   681 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   922 root      20   0  439788  11644  11428 S   0.0  0.5   0:00.13 php-fpm: +
   924 root      20   0 1763124 745428    736 S   0.0 30.8   0:13.54 /usr/loca+
   927 named     20   0  785456  20868   1752 S   0.0  0.9   0:00.60 /usr/sbin+
   930 root      20   0  111304    784    680 S   0.0  0.0   0:00.04 /usr/sbin+
   931 cpanelc+  20   0    9700   2688   2388 S   0.0  0.1   0:00.51 /usr/loca+
   932 root      20   0  396248    620    540 S   0.0  0.0   0:00.09 php-fpm: +
   934 systuser  20   0  113272   1832      0 S   0.0  0.1   0:00.00 /usr/loca+
   937 root      20   0  153404    672    588 S   0.0  0.0   0:00.01 pure-ftpd+
   938 root      20   0  400740   3212    912 S   0.0  0.1   0:00.19 php-fpm: +
   939 root      20   0   51508    816    656 S   0.0  0.0   0:00.04 /usr/sbin+
   940 root      20   0  261160   5812   1872 S   0.0  0.2   0:00.24 cpsrvd (S+
   941 root      20   0  445028   3000   3000 S   0.0  0.1   0:00.06 sw-engine+
   943 memcach+  20   0  342400    308    308 S   0.0  0.0   0:00.01 /usr/bin/+
   944 root      20   0  216400   4260   2980 S   0.0  0.2   0:00.17 /usr/sbin+
   946 root      20   0  388892    980    764 S   0.0  0.0   0:00.08 php-fpm: +
   947 root      20   0 1277312  10676    332 S   0.0  0.4   0:27.95 /usr/bin/+
   948 telegraf  20   0 5654048  30864    184 S   0.0  1.3   0:00.49 /usr/loca+
   953 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   954 root      20   0 1276100   9416    292 S   0.0  0.4   0:25.46 /usr/bin/+
   959 root      20   0  389508    632    548 S   0.0  0.0   0:00.08 php-fpm: +
   961 systuser  20   0   12660     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   962 root      20   0  572372   1220    756 S   0.0  0.1   0:00.15 /usr/bin/+
   967 systuser  20   0  114016  12204   2216 S   0.0  0.5   0:00.23 /usr/loca+
   969 systuser  20   0  112524   2084      0 S   0.0  0.1   0:00.00 /usr/loca+
  1074 dovenull  20   0   46772    964    720 S   0.0  0.0   0:00.01 dovecot/p+
  1075 dovenull  20   0   47056   2544   1872 S   0.0  0.1   0:00.00 dovecot/i+
  1076 dovecot   20   0   10320    680    568 S   0.0  0.0   0:00.00 dovecot/a+
  1077 root      20   0   10452    760    588 S   0.0  0.0   0:00.00 dovecot/l+
  1078 dovenull  20   0   46772   1244    960 S   0.0  0.1   0:00.00 dovecot/p+
  1079 dovenull  20   0   46780    636    588 S   0.0  0.0   0:00.00 dovecot/i+
  1086 root      20   0   24396   1964    596 S   0.0  0.1   0:00.02 dovecot/c+
  1087 dovecot   20   0   13568    544    352 S   0.0  0.0   0:00.00 dovecot/s+
  1138 dovecot   20   0   41056    924    672 S   0.0  0.0   0:00.01 dovecot/a+
  1152 systuser  20   0  157708   2268    292 S   0.0  0.1   0:00.00 SonarPush+
  1153 root      20   0  248256 119692   2840 S   0.0  4.9   0:02.95 /usr/loca+
  1197 wp-tool+  20   0  387528  13328   1704 S   0.0  0.6   0:00.08 /usr/bin/+
  1198 wp-tool+  20   0  410452  35968   1692 S   0.0  1.5   0:00.72 /usr/bin/+
  1263 root      20   0  167452   1664   1064 S   0.0  0.1   0:00.06 dnsadmin +
  1264 root      20   0  209260  10036   1312 S   0.0  0.4   0:00.25 tailwatchd
  1265 root      20   0  183900    504    504 S   0.0  0.0   0:00.07 cpdavd - +
  1670 root      20   0  299272    840    528 S   0.0  0.0   0:00.01 php-fpm: +
  1711 root      38  18  130416   1536    816 S   0.0  0.1   0:00.00 cpanellog+
  1942 root      20   0  266980   8144    936 S   0.0  0.3   0:00.26 /usr/sbin+
  1943 root      20   0   12812    432    316 S   0.0  0.0   0:00.08 /usr/loca+
  1944 root      20   0   12732    436    364 S   0.0  0.0   0:00.07 /usr/loca+
  1945 root      20   0   12852    444    312 S   0.0  0.0   0:00.08 /usr/loca+
  1946 root      20   0   53268    384    384 S   0.0  0.0   0:00.04 /usr/loca+
  2005 root      20   0  180932   9432   1284 S   0.0  0.4   0:00.62 lfd - sle+
  2162 root      20   0  183052   1016    444 S   0.0  0.0   0:00.00 /usr/sbin+
  2382 root      20   0  113284    396    220 S   0.0  0.0   0:00.00 /bin/sh -+
  2406 root      20   0  108056     72      0 S   0.0  0.0   0:00.00 sleep 4h +
  2431 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  2439 oysipao+  20   0    3148    380      0 S   0.0  0.0   0:00.00 [kworker]
  2488 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3023 oysipao+  20   0    3152    460      0 S   0.0  0.0   0:00.01 [kworker]
  3940 nobody    20   0  277508  18692   3744 S   0.0  0.8   0:00.53 /usr/sbin+
  3949 nobody    20   0  277816  18532   3612 S   0.0  0.8   0:00.65 /usr/sbin+
  4335 nobody    20   0  277500  18448   3624 S   0.0  0.8   0:00.61 /usr/sbin+
  5216 nobody    20   0  277476  18652   3808 S   0.0  0.8   0:00.49 /usr/sbin+
  5221 nobody    20   0  277528  18768   3796 S   0.0  0.8   0:00.63 /usr/sbin+
  5955 root      20   0  262888 128308   1780 S   0.0  5.3   0:00.46 spamd chi+
  5956 root      20   0  248256 117356    540 S   0.0  4.8   0:00.00 spamd chi+
  8007 nobody    20   0  277476  18272   3476 S   0.0  0.8   0:00.36 /usr/sbin+
  9457 nobody    20   0  277476  18164   3444 S   0.0  0.8   0:00.32 /usr/sbin+
  9586 nobody    20   0  277476  17988   3244 S   0.0  0.7   0:00.28 /usr/sbin+
  9754 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9793 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10455 nobody    20   0  277476  18444   3688 S   0.0  0.8   0:00.20 /usr/sbin+
 10473 nobody    20   0  277476  17820   3100 S   0.0  0.7   0:00.22 /usr/sbin+
 10496 nobody    20   0  277508  18176   3352 S   0.0  0.8   0:00.10 /usr/sbin+
 10497 nobody    20   0  277476  18444   3708 S   0.0  0.8   0:00.19 /usr/sbin+
 10499 nobody    20   0  277476  18144   3356 S   0.0  0.7   0:00.18 /usr/sbin+
 10572 nobody    20   0  277480  18144   3340 S   0.0  0.7   0:00.10 /usr/sbin+
 11037 nobody    20   0  277476  16864   2192 S   0.0  0.7   0:00.19 /usr/sbin+
 11066 nobody    20   0  277476  18536   3724 S   0.0  0.8   0:00.12 /usr/sbin+
 11068 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.19 /usr/sbin+
 11069 nobody    20   0  277500  18316   3452 S   0.0  0.8   0:00.20 /usr/sbin+
 11499 nobody    20   0  277476  18316   3596 S   0.0  0.8   0:00.12 /usr/sbin+
 11500 nobody    20   0  277476  17976   3244 S   0.0  0.7   0:00.10 /usr/sbin+
 11502 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.11 [httpd] <+
 11524 nobody    20   0  277476  17968   3232 S   0.0  0.7   0:00.09 /usr/sbin+
 11525 nobody    20   0  277476  18268   3436 S   0.0  0.8   0:00.08 /usr/sbin+
 11528 nobody    20   0  277476  18384   3616 S   0.0  0.8   0:00.14 /usr/sbin+
 11529 nobody    20   0  277476  18056   3328 S   0.0  0.7   0:00.13 /usr/sbin+
 11530 nobody    20   0  277816  18688   3732 S   0.0  0.8   0:00.11 /usr/sbin+
 11724 nobody    20   0  277476  18364   3600 S   0.0  0.8   0:00.07 /usr/sbin+
 11961 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12762 nobody    20   0  277816  18280   3420 S   0.0  0.8   0:00.02 /usr/sbin+
 12783 nobody    20   0  277476  17108   2444 S   0.0  0.7   0:00.01 /usr/sbin+
 12784 nobody    20   0  277644  18200   3344 S   0.0  0.8   0:00.01 /usr/sbin+
 12803 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 12804 nobody    20   0  277480  16884   2216 S   0.0  0.7   0:00.02 /usr/sbin+
 12805 nobody    20   0  277644  16944   2188 S   0.0  0.7   0:00.01 /usr/sbin+
 12806 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 12829 nobody    20   0  277476  16840   2176 S   0.0  0.7   0:00.02 /usr/sbin+
 12830 nobody    20   0  277476  16832   2168 S   0.0  0.7   0:00.02 /usr/sbin+
 12831 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 12832 nobody    20   0  277476  18136   3416 S   0.0  0.7   0:00.02 /usr/sbin+
 12833 nobody    20   0  277484  16844   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 12834 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 12835 nobody    20   0  277516  17952   3180 S   0.0  0.7   0:00.02 /usr/sbin+
 12836 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 12861 nigeria   20   0  400460   5496   2372 S   0.0  0.2   0:00.00 php-fpm: +
 12880 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.00 /usr/sbin+
 12927 nobody    20   0  277324  16632   2164 S   0.0  0.7   0:00.00 /usr/sbin+
 12949 nobody    20   0  277324  16632   2164 S   0.0  0.7   0:00.00 /usr/sbin+
 12950 nobody    20   0  277516  17928   3160 S   0.0  0.7   0:00.01 /usr/sbin+
 12973 nobody    20   0  277324  16632   2164 S   0.0  0.7   0:00.00 /usr/sbin+
 12974 nobody    20   0  277324  16632   2164 R   0.0  0.7   0:00.00 /usr/sbin+
 12975 nobody    20   0  277324  16632   2164 S   0.0  0.7   0:00.00 /usr/sbin+
 12976 nobody    20   0  277324  16632   2164 S   0.0  0.7   0:00.00 /usr/sbin+
 13016 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 13029 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13032 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13033 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13034 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13036 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13037 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13039 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13040 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13042 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13045 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 13050 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13051 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13053 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13057 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13058 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 13059 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 13061 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 13062 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 13063 root      20   0  169868  16852   2884 S   0.0  0.7   0:00.09 /usr/loca+
 13066 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 13070 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 13074 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13078 cloudw    20   0  355492  15428  10292 S   0.0  0.6   0:00.01 /opt/cpan+
 13080 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 13082 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13089 cloudw    20   0  355492  15952  10424 S   0.0  0.7   0:00.00 /opt/cpan+
 13118 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 13121 root      20   0  113496   1428   1236 S   0.0  0.1   0:00.00 bash /usr+
 13123 root      20   0  138572   5024   2056 R   0.0  0.2   0:00.00 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:59   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:59   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/1:1]
root         36  0.9  0.0      0     0 ?        S    00:59   0:05  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:59   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:59   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [scsi_tmf_1]
root        249  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/0:1H]
root        269  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [xprtiod]
root        513  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/1:3]
root        653  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [loop0]
root        680  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [jbd2/loop0-8]
root        681  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ext4-rsv-conver]
root       2431  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:3]
root       2488  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/1:4]
root       9754  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root       9793  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/1:0]
root      11961  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/u200:2]
root          1  0.2  0.1  44264  3396 ?        Ss   00:59   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39496  3860 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   644 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   624 ?        S<sl 00:59   0:00 /sbin/auditd
root        486  0.0  0.0  21540   580 ?        Ss   00:59   0:00 /usr/sbin/irqbalance --foreground
root        487  0.0  0.0  52852   520 ?        Ss   00:59   0:00 /usr/sbin/smartd -n -q never
polkitd     501  0.0  0.0 610540  1276 ?        Ssl  00:59   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        502  0.0  0.0  24604  1308 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-logind
root        503  0.0  0.2 224148  5744 ?        Ss   00:59   0:00 queueprocd - waiting up to 60s to process a task
dbus        504  0.0  0.0  58400  1424 ?        Ss   00:59   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        510  0.1  0.0 1064132 1472 ?        Ssl  00:59   0:00 /usr/sbin/nscd
rpc         514  0.0  0.0  69256   316 ?        Ss   00:59   0:00 /sbin/rpcbind -w
root        532  0.0  0.0   4388   304 ?        Ss   00:59   0:00 /usr/sbin/acpid
root        533  0.0  0.0 195208   244 ?        Ssl  00:59   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0 152780   396 ?        Ss   00:59   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        559  0.0  0.0  24208   180 ?        Ss   00:59   0:00 /usr/sbin/atd -f
root        560  0.0  0.0 124480   736 ?        Ss   00:59   0:00 /usr/sbin/crond -n
root       2162  0.0  0.0 183052  1016 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       2382  0.0  0.0 113284   396 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       2406  0.0  0.0 108056    72 ?        S    01:00   0:00  |       \_ sleep 4h 33m
root      13029  0.0  0.0 183048  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13059  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      13066  0.0  0.0 108052   356 ?        S    01:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      13070  0.0  0.0 113288  1512 ?        S    01:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      13131  0.0  0.0 153840  2096 ?        R    01:09   0:00  |               \_ ps auxf
root      13032  0.0  0.0 183048  2152 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13057  0.0  0.0  20164   808 ?        Rs   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      13033  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13045  0.0  0.0  20164   992 ?        Ss   01:09   0:00  |   \_ jailshell (cloudsms) [13132] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  13132  0.0  0.0  20164   264 ?        S    01:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  13133  0.0  0.0  20164   264 ?        R    01:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      13034  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13053  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      13036  0.0  0.0 183048  2148 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13051  0.0  0.0  20164   808 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      13037  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13050  0.0  0.0  20164   804 ?        Ss   01:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      13039  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13058  0.0  0.0 113284  1212 ?        Ss   01:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      13063  9.0  0.6 169868 16852 ?        S    01:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      13121  0.0  0.0 113496  1428 ?        S    01:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      13123  0.0  0.2 168180  5228 ?        R    01:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      13040  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13062  0.0  0.0  20164   964 ?        Ss   01:09   0:00  |   \_ jailshell (pactpay) [13074] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13074  0.0  0.0  20164   260 ?        S    01:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13080  1.0  0.7 480124 17688 ?        S    01:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      13042  0.0  0.0 183048  2144 ?        S    01:09   0:00  \_ /usr/sbin/CROND -n
root      13061  0.0  0.0  20164   968 ?        Ss   01:09   0:00      \_ jailshell (nigeria) [13082] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13082  0.0  0.0  20164   260 ?        S    01:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13084  5.0  0.6 404052 16144 ?        S    01:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        572  0.0  0.0 114704   412 ttyS0    Ss+  00:59   0:00 /bin/bash
root        573  0.0  0.0 108296   360 tty1     Ss+  00:59   0:00 /sbin/agetty --noclear tty1 linux
mailnull    599  0.0  0.1  88988  3728 ?        Ss   00:59   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        922  0.0  0.4 439788 11644 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        924  2.2 30.7 1763124 745428 ?      Ssl  00:59   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.1  0.8 785456 20868 ?        Ssl  00:59   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  0.0 111304   784 ?        Ss   00:59   0:00 /usr/sbin/sshd -D
cpanelc+    931  0.0  0.1   9700  2688 ?        Ss   00:59   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        932  0.0  0.0 396248   620 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    934  0.0  0.0 113272  1832 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        937  0.0  0.0 153404   672 ?        Ss   00:59   0:00 pure-ftpd (SERVER)
root        938  0.0  0.1 400740  3212 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   12861  0.0  0.2 400460  5496 ?        S    01:08   0:00  \_ php-fpm: pool nigeriadecide_org
root        939  0.0  0.0  51508   816 ?        Ss   00:59   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1074  0.0  0.0  46772   964 ?        S    00:59   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.1  47056  2544 ?        S    00:59   0:00  \_ dovecot/imap-login
dovecot    1076  0.0  0.0  10320   680 ?        S    00:59   0:00  \_ dovecot/anvil
root       1077  0.0  0.0  10452   760 ?        S    00:59   0:00  \_ dovecot/log
dovenull   1078  0.0  0.0  46772  1244 ?        S    00:59   0:00  \_ dovecot/pop3-login
dovenull   1079  0.0  0.0  46780   636 ?        S    00:59   0:00  \_ dovecot/imap-login
root       1086  0.0  0.0  24396  1964 ?        S    00:59   0:00  \_ dovecot/config
dovecot    1087  0.0  0.0  13568   544 ?        S    00:59   0:00  \_ dovecot/stats
dovecot    1138  0.0  0.0  41056   924 ?        S    00:59   0:00  \_ dovecot/auth
root        940  0.0  0.2 261160  5812 ?        Ss   00:59   0:00 cpsrvd (SSL) - waiting for connections                   
root      13016  0.0  0.0      0     0 ?        Z    01:08   0:00  \_ [cpaneld - servi] <defunct>
root        941  0.0  0.1 445028  3000 ?        Ss   00:59   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    943  0.0  0.0 342400   308 ?        Ssl  00:59   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        944  0.0  0.1 216400  4260 ?        Ssl  00:59   0:00 /usr/sbin/rsyslogd -n
root        946  0.0  0.0 388892   980 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        947  4.7  0.4 1277312 10676 ?       Ssl  00:59   0:27 /usr/bin/checkstatus
telegraf    948  0.0  1.2 5654048 30864 ?       SLsl 00:59   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    953  0.0  0.0  10132    44 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        954  4.3  0.3 1276100 9416 ?        Ssl  00:59   0:25 /usr/bin/cspdaemon
root        959  0.0  0.0 389508   632 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    961  0.0  0.0  12660    44 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        962  0.0  0.0 572372  1220 ?        Ssl  00:59   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    967  0.0  0.5 114016 12204 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    969  0.0  0.0 112524  2084 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser   1152  0.0  0.0 157708  2268 ?        S    00:59   0:00 SonarPush 0.6.12 [sleeping]
root       1153  0.5  4.9 248256 119692 ?       Ss   00:59   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5955  0.1  5.3 262888 128308 ?       S    01:03   0:00  \_ spamd child
root       5956  0.0  4.8 248256 117356 ?       S    01:03   0:00  \_ spamd child
wp-tool+   1197  0.0  0.5 387528 13328 ?        Ss   00:59   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1198  0.1  1.4 410452 35968 ?        Ss   00:59   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1263  0.0  0.0 167452  1664 ?        Ss   00:59   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209260 10036 ?        Ss   00:59   0:00 tailwatchd
root       1265  0.0  0.0 183900   504 ?        Ss   00:59   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1670  0.0  0.0 299272   840 ?        Ss   00:59   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1536 ?        SN   00:59   0:00 cpanellogd - sleeping for logs
mysql      1748  1.3  7.8 1457012 190956 ?      Sl   00:59   0:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  0.3 266980  8144 ?        Ss   00:59   0:00 /usr/sbin/httpd -k start
root       1943  0.0  0.0  12812   432 ?        S    00:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1944  0.0  0.0  12732   436 ?        S    00:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1945  0.0  0.0  12852   444 ?        S    00:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1946  0.0  0.0  53268   384 ?        S    00:59   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3940  0.1  0.7 277508 18692 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     3949  0.1  0.7 277816 18532 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     4335  0.1  0.7 277500 18448 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody     5216  0.1  0.7 277476 18652 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody     5221  0.1  0.7 277528 18768 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody     8007  0.1  0.7 277476 18272 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody     9457  0.1  0.7 277476 18164 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody     9586  0.1  0.7 277476 17988 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    10455  0.1  0.7 277476 18444 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    10473  0.1  0.7 277476 17820 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    10496  0.0  0.7 277508 18176 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    10497  0.1  0.7 277476 18444 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    10499  0.1  0.7 277476 18144 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    10572  0.0  0.7 277480 18144 ?        S    01:06   0:00  \_ /usr/sbin/httpd -k start
nobody    11037  0.1  0.6 277476 16864 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11066  0.1  0.7 277476 18536 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11068  0.1  0.6 277476 16836 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11069  0.1  0.7 277500 18316 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    13078  1.0  0.6 355492 15692 ?        S    01:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    11499  0.1  0.7 277476 18316 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11500  0.1  0.7 277476 17976 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11502  0.1  0.0      0     0 ?        Z    01:07   0:00  \_ [httpd] <defunct>
nobody    11524  0.1  0.7 277476 17968 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11525  0.0  0.7 277476 18268 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11528  0.1  0.7 277476 18384 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    13122  0.0  0.6 355492 15428 ?        S    01:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    11529  0.1  0.7 277476 18056 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11530  0.1  0.7 277816 18688 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    11724  0.0  0.7 277476 18364 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12762  0.1  0.7 277816 18280 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12783  0.0  0.7 277476 17108 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12784  0.0  0.7 277644 18200 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12803  0.0  0.6 277476 16836 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12804  0.1  0.6 277480 16884 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12805  0.0  0.7 277644 16944 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12806  0.0  0.6 277476 16836 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12829  0.2  0.6 277476 16840 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12830  0.2  0.6 277476 16832 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12831  0.1  0.6 277476 16836 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12832  0.2  0.7 277476 18136 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12833  0.1  0.6 277484 16844 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12834  0.1  0.6 277476 16836 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12835  0.2  0.7 277516 17952 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12836  0.1  0.6 277476 16836 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12880  0.0  0.6 277476 16836 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12927  0.0  0.6 277324 16632 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12949  0.0  0.6 277324 16632 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12950  0.2  0.7 277516 17928 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12973  0.0  0.6 277324 16632 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12974  0.2  0.6 277476 16832 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12975  0.0  0.6 277324 16632 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    12976  0.0  0.6 277324 16632 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
root       2005  0.1  0.3 180932  9432 ?        Ss   00:59   0:00 lfd - sleeping
oysipao+   2439  0.0  0.0   3148   380 ?        Ss   01:00   0:00 [kworker]
oysipao+   3023  0.0  0.0   3152   460 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 587  Threads: 3  Questions: 37421  Slow queries: 0  Opens: 904  Flush tables: 1  Open tables: 857  Queries per second avg: 63.749
*************************** 1. row ***************************
     Id: 515
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 516
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: freeing items
   Info: SELECT * FROM `34` WHERE `phone`='2348139493213' LIMIT 1
*************************** 3. row ***************************
     Id: 522
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 4. row ***************************
     Id: 523
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
## network stats
      1 104.210.140.131 TIME_WAIT
      1 114.119.134.79 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.189 TIME_WAIT
      1 54.86.115.253 TIME_WAIT
      1 66.249.64.13 TIME_WAIT
      1 66.249.64.227 TIME_WAIT
      1 66.249.70.100 TIME_WAIT
      1 66.249.70.166 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 66.249.70.6 TIME_WAIT
      1 66.249.70.70 TIME_WAIT
      1 85.254.138.66 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 14-Nov-2025 01:09:02 WAT
   Restart Time: Friday, 14-Nov-2025 00:59:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 minutes 41 seconds
   Server load: 0.64 0.54 0.40
   Total accesses: 4282 - Total Traffic: 113.2 MB - Total Duration: 2547296
   CPU Usage: u4.81 s2.18 cu53.09 cs47.52 - 18.5% CPU load
   7.37 requests/sec - 199.6 kB/second - 27.1 kB/request - 594.885 ms/request
   39 requests currently being processed, 0 workers gracefully restarting, 11 idle workers

KK_K_K__KW_C_K_KKCKKKW_KK_KRKKK_KKKKWKWKKKKKKKK.._....KK........
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur  Conn Child Slot     Client     Protocol           VHost                                        Request
   0-0  12762 1/4/116   K 0.05 1   302 70078 29.2 0.10  3.10 66.249.64.171  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2896989276 HTTP/1.1
   1-0  9457  1/52/127  K 1.40 1   301 68631 29.7 1.48  3.13 192.178.4.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=267873545 HTTP/1.1
   2-0  12783 0/3/87    _ 0.04 0   4   47386 0.0  0.08  2.03 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-0  10455 2/32/127  K 0.87 3   335 68913 60.6 0.94  3.03 192.178.4.102  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1843576133 HTTP/1.1
   4-0  12784 0/3/107   _ 0.05 0   7   55650 0.0  0.07  2.55 44.206.93.215  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/images/2019electio
   5-0  11037 1/32/139  K 0.88 3   471 80791 30.3 0.94  3.68 66.249.64.165  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2683413825 HTTP/1.1
   6-0  12803 0/2/109   _ 0.02 1   349 65116 0.0  0.06  2.86 66.249.70.1    http/1.1 schoolplus.cloudware.ng:80 GET /?p=365307493 HTTP/1.1
   7-0  12804 0/4/98    _ 0.04 0   360 58424 0.0  0.06  2.99 66.249.64.7    http/1.1 schoolplus.cloudware.ng:80 GET /?p=4125970751 HTTP/1.1
   8-0  11499 1/20/95   K 0.47 0   351 58029 30.7 0.53  2.46 66.249.64.39   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4280185553 HTTP/1.1
   9-0  3940  0/89/89   W 2.26 0   0   51427 0.0  2.55  2.55 66.249.64.6    http/1.1 schoolplus.cloudware.ng:80 GET /?p=932243069 HTTP/1.1
   10-0 12805 0/2/85    _ 0.02 0   414 51844 0.0  0.06  2.22 66.249.70.66   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1190478451 HTTP/1.1
   11-0 11500 1/16/76   C 0.43 5   413 46932 29.5 0.45  2.06 66.249.64.14   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2985992787 HTTP/1.1
   12-0 12806 0/2/85    _ 0.02 1   362 49063 0.0  0.06  2.19 66.249.64.97   http/1.1 schoolplus.cloudware.ng:80 GET /?p=686776 HTTP/1.1
   13-0 3949  2/108/108 K 2.82 4   339 68204 61.2 2.98  2.98 66.249.64.71   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3055086838 HTTP/1.1
   14-0 11724 0/12/90   _ 0.29 0   364 57826 0.0  0.33  2.51 66.249.64.46   http/1.1 schoolplus.cloudware.ng:80 GET /?p=166176374 HTTP/1.1
   15-0 10473 1/37/88   K 0.98 1   285 50707 29.9 1.04  2.27 66.249.64.72   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1655396167 HTTP/1.1
   16-0 4335  1/99/99   K 2.63 0   353 64460 31.0 2.76  2.76 66.249.64.13   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1462750623 HTTP/1.1
   17-0 11502 1/19/98   C 0.49 0   0   61394 0.2  0.53  2.68 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 12829 2/3/89    K 0.06 3   281 54244 60.6 0.09  2.56 192.178.4.105  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4161156177 HTTP/1.1
   19-0 11524 1/15/69   K 0.38 1   401 44294 31.4 0.43  1.61 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1153264978 HTTP/1.1
   20-0 11066 2/24/102  K 0.49 1   265 44805 60.0 0.53  2.23 66.249.70.5    http/1.1 schoolplus.cloudware.ng:80 GET /?p=151687876 HTTP/1.1
   21-0 12830 0/2/102   W 0.04 0   0   65631 0.0  0.06  2.70 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /vendor/zendframework/zend-code/ HTTP/1.1
   22-0 12831 0/2/82    _ 0.03 0   395 49508 0.0  0.06  2.03 192.178.4.103  http/1.1 schoolplus.cloudware.ng:80 GET /?p=647088742 HTTP/1.1
   23-0 12832 2/4/79    K 0.05 3   265 47979 64.3 0.10  2.06 66.249.70.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2874962203 HTTP/1.1
   24-0 12833 2/3/81    K 0.04 2   274 48018 59.5 0.09  2.30 192.178.4.103  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2419700192 HTTP/1.1
   25-0 10496 0/16/50   _ 0.41 0   274 37059 0.0  0.62  1.40 66.249.64.107  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2490422080 HTTP/1.1
   26-0 11525 1/16/71   K 0.35 0   411 51886 31.1 0.34  2.32 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3517590726 HTTP/1.1
   27-0 9586  0/45/73   R 1.27 22  350 48500 0.0  1.32  2.07 118.179.200.50 http/1.1 health.oyostate.gov.ng:443
   28-0 10497 1/38/79   K 0.80 3   269 40605 32.0 0.88  2.01 66.249.64.40   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2109749259 HTTP/1.1
   29-0 12834 1/2/59    K 0.03 4   329 35370 32.4 0.06  1.55 66.249.64.44   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1091316189 HTTP/1.1
   30-0 10499 1/31/66   K 0.82 3   403 40888 29.3 0.87  1.79 66.249.64.232  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1016402670 HTTP/1.1
   31-0 12835 0/2/61    _ 0.04 0   363 32526 0.0  0.07  1.37 66.249.64.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1056247499 HTTP/1.1
   32-0 12836 1/2/43    K 0.03 4   262 23622 30.5 0.06  1.02 66.249.70.7    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2549316092 HTTP/1.1
   33-0 12880 1/2/62    K 0.01 2   313 37526 30.0 0.06  1.64 192.178.4.101  http/1.1 schoolplus.cloudware.ng:80 GET /?p=412936067 HTTP/1.1
   34-0 11068 1/31/102  K 0.86 3   334 62331 29.7 0.92  2.75 66.249.70.138  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4050919259 HTTP/1.1
   35-0 10572 1/17/59   K 0.43 1   262 35563 29.7 0.68  1.76 66.249.64.228  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4250738460 HTTP/1.1
   36-0 12927 0/1/52    W 0.00 0   0   30724 0.0  0.03  1.32 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   37-0 11069 1/33/70   K 0.89 0   485 57594 31.3 1.16  2.58 66.249.64.96   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3999560591 HTTP/1.1
   38-0 11528 0/25/44   W 0.62 0   0   25800 0.0  0.69  1.15 66.249.64.167  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3864248211 HTTP/1.1
   39-0 11529 1/23/56   K 0.60 2   277 33303 30.6 0.66  1.46 66.249.70.110  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2738655055 HTTP/1.1
   40-0 11530 2/22/61   K 0.44 3   313 36667 62.9 0.53  1.52 66.249.64.108  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2804262450 HTTP/1.1
   41-0 12949 1/1/48    K 0.00 4   354 29683 30.3 0.03  1.18 66.249.70.161  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1300999662 HTTP/1.1
   42-0 12950 2/2/39    K 0.02 2   333 19379 66.5 0.06  0.85 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3377583219 HTTP/1.1
   43-0 12973 1/1/21    K 0.00 3   304 10154 30.3 0.03  0.51 66.249.64.163  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3320007474 HTTP/1.1
   44-0 12974 2/2/56    K 0.02 0   358 33445 58.9 0.06  1.45 66.249.64.132  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4035391632 HTTP/1.1
   45-0 12975 1/1/43    K 0.00 2   406 26950 31.4 0.03  1.05 66.249.70.100  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1094212708 HTTP/1.1
   46-0 12976 1/1/34    K 0.00 2   373 18284 29.7 0.03  0.79 66.249.64.33   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3740548662 HTTP/1.1
   47-0 -     0/0/34    . 0.00 241 0   22410 0.0  0.00  0.98 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/33    . 0.00 178 0   20777 0.0  0.00  0.91 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 5216  0/87/87   _ 2.12 1   259 52872 0.0  2.38  2.38 66.249.64.41   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1030873660 HTTP/1.1
   50-0 -     0/0/20    . 0.00 221 4   10474 0.0  0.00  0.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/83    . 0.00 99  0   48079 0.0  0.00  2.25 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/55    . 0.00 164 0   26188 0.0  0.00  1.21 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/19    . 0.00 174 0   10919 0.0  0.00  0.47 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 5221  1/108/108 K 2.82 2   378 66741 31.3 3.29  3.29 66.249.70.130  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3439183550 HTTP/1.1
   55-0 8007  1/61/61   K 1.61 2   298 37980 30.8 1.70  1.70 66.249.70.140  http/1.1 schoolplus.cloudware.ng:80 GET /?p=96841724 HTTP/1.1
   56-0 -     0/0/11    . 0.00 213 0   3230  0.0  0.00  0.16 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/11    . 0.00 212 0   3768  0.0  0.00  0.19 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/36    . 0.00 89  0   19653 0.0  0.00  0.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/41    . 0.00 113 0   25201 0.0  0.00  1.12 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/7     . 0.00 236 0   1763  0.0  0.00  0.10 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 551
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 2...55)
   index usage: 9%, cache usage: 13%
   total entries stored since starting: 880
   total entries replaced since starting: 0
   total entries expired since starting: 329
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit