403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.02.42.txt
 ## swap threshold exceeded
## server overview
2025-11-15.02.42 load[0] mem[53/77] mysql[1/12] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1136         241          67         985         975
Swap:          1999        1662         337
 02:42:01 up  7:46,  0 users,  load average: 0.14, 0.23, 0.27
## system overview
top - 02:42:01 up  7:46,  0 users,  load average: 0.14, 0.23, 0.27
Tasks: 202 total,   2 running, 198 sleeping,   0 stopped,   2 zombie
%Cpu(s): 54.5 us, 21.2 sy,  0.0 ni, 21.2 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   248864 free,  1162176 used,  1009260 buff/cache
KiB Swap:  2047996 total,   345596 free,  1702400 used.  1000148 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 282940   4404 S  75.0 11.7   5:49.83 /usr/sbin+
 67381 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.04 /opt/cpan+
   521 polkitd   20   0  612240    840    480 S   6.2  0.0   0:03.82 /usr/lib/+
  1174 wp-tool+  20   0  410480  24984   1800 S   6.2  1.0   0:23.60 /usr/bin/+
 67373 pactpay   20   0  480124  17316  11580 S   6.2  0.7   0:00.02 /opt/cpan+
 67384 root      20   0  160220   2060   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44388   3316   1492 S   0.0  0.1   0:38.46 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.37 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:28.70 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.27 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.59 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.39 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.77 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:03.06 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   7120   6856 S   0.0  0.3   0:15.81 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    520    392 S   0.0  0.0   0:02.48 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6748   1728 S   0.0  0.3   0:00.38 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.01 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.63 /usr/sbin+
   519 root      20   0   52852    412    312 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1196    824 S   0.0  0.0   0:06.46 /usr/lib/+
   522 dbus      20   0   58728   1384    636 S   0.0  0.1   0:14.57 /usr/bin/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1872    832 S   0.0  0.1   0:22.81 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.81 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3952    940 S   0.0  0.2   0:00.80 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:02.65 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.52 /usr/sbin+
   914 root      20   0 1350088   8452     44 S   0.0  0.3   0:24.58 /usr/bin/+
   916 root      20   0   51656   1212    820 S   0.0  0.1   0:00.36 /usr/sbin+
   918 root      20   0  261424   6768   1764 S   0.0  0.3   0:07.70 cpsrvd (S+
   922 root      20   0 1763124  67736    784 S   0.0  2.8   0:13.82 /usr/loca+
   923 root      20   0  298320   7184   6220 S   0.0  0.3   0:07.63 /usr/sbin+
   924 root      20   0  396248    400    312 S   0.0  0.0   0:00.73 php-fpm: +
   933 root      20   0  389508    472    384 S   0.0  0.0   0:00.76 php-fpm: +
   935 named     20   0 1054792  41052   2324 S   0.0  1.7   0:15.95 /usr/sbin+
   937 root      20   0  388892    580    484 S   0.0  0.0   0:00.82 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  37160   6140 S   0.0  1.5   0:15.36 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.25 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.59 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.62 /usr/bin/+
   954 cpanelc+  20   0   10576   3712   2356 S   0.0  0.2   0:22.97 /usr/loca+
   958 root      20   0  439788   1000    900 S   0.0  0.0   0:00.81 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2664    656 S   0.0  0.1   0:03.86 php-fpm: +
   971 systuser  20   0  114016  14120   2812 S   0.0  0.6   0:06.62 /usr/loca+
   972 root      20   0  572372    968    428 S   0.0  0.0   0:02.43 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.09 dovecot/a+
  1133 root      20   0  248092  11480    744 S   0.0  0.5   0:06.09 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.13 SonarPush+
  1173 wp-tool+  20   0  387556   3896   1560 S   0.0  0.2   0:00.29 /usr/bin/+
  1253 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.51 dnsadmin +
  1254 root      20   0  209336  10336   2332 S   0.0  0.4   0:03.04 tailwatchd
  1256 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.89 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.78 php-fpm: +
  1715 root      38  18  130416   1396    716 S   0.0  0.1   0:00.06 cpanellog+
  1942 root      20   0  267052  31184   5692 S   0.0  1.3   0:02.90 /usr/sbin+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.52 [kworker]
  8135 root      20   0  270332  96748   3284 S   0.0  4.0   0:04.28 spamd chi+
  8136 root      20   0  249228  32532    736 S   0.0  1.3   0:00.05 spamd chi+
 10032 dovenull  20   0   46912   4128   3124 S   0.0  0.2   0:00.06 dovecot/p+
 10033 dovenull  20   0   47280   4668   3384 S   0.0  0.2   0:00.04 dovecot/i+
 10034 root      20   0   10452   1344    976 S   0.0  0.1   0:00.04 dovecot/l+
 10035 dovenull  20   0   46912   4380   3340 S   0.0  0.2   0:00.06 dovecot/p+
 10036 dovenull  20   0   46924   4388   3364 S   0.0  0.2   0:00.01 dovecot/i+
 10037 root      20   0   24528  12060   1232 S   0.0  0.5   0:00.03 dovecot/c+
 10038 dovecot   20   0   13568   1356   1088 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12876   1420   1192 S   0.0  0.1   0:00.49 /usr/loca+
 10040 root      20   0   12732   1376   1192 S   0.0  0.1   0:00.43 /usr/loca+
 10041 root      20   0   12928   1436   1192 S   0.0  0.1   0:00.47 /usr/loca+
 10042 dovecot   20   0   41188   2664   1864 S   0.0  0.1   0:00.15 dovecot/a+
 10043 root      20   0   53268  11876   2492 S   0.0  0.5   0:00.05 /usr/loca+
 10709 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 33590 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 44271 nobody    20   0  277904  36284   4528 S   0.0  1.5   0:02.48 /usr/sbin+
 46515 root      20   0  182280  29556   1544 S   0.0  1.2   0:10.22 lfd - sle+
 49275 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 51169 nobody    20   0  277568  35900   4412 S   0.0  1.5   0:02.10 /usr/sbin+
 55126 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55856 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 57588 nobody    20   0  277624  35932   4436 S   0.0  1.5   0:01.10 /usr/sbin+
 57876 nobody    20   0  277600  35724   4148 S   0.0  1.5   0:01.18 /usr/sbin+
 57895 nobody    20   0  277768  35716   4104 S   0.0  1.5   0:00.90 /usr/sbin+
 59350 nobody    20   0  277608  35860   4348 S   0.0  1.5   0:00.96 /usr/sbin+
 59810 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60582 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62275 nobody    20   0  277940  35932   4172 S   0.0  1.5   0:00.68 /usr/sbin+
 62296 nobody    20   0  277548  35444   4004 S   0.0  1.5   0:00.74 /usr/sbin+
 63035 nobody    20   0  277568  35476   4036 S   0.0  1.5   0:00.52 /usr/sbin+
 63059 nobody    20   0  277576  35592   4060 S   0.0  1.5   0:00.53 /usr/sbin+
 64285 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64912 nobody    20   0  277576  35464   4024 S   0.0  1.5   0:00.26 /usr/sbin+
 65121 nobody    20   0  277908  35392   3796 S   0.0  1.5   0:00.33 /usr/sbin+
 65570 nobody    20   0  277548  35168   3752 S   0.0  1.5   0:00.22 /usr/sbin+
 65610 nobody    20   0  277620  35492   4004 S   0.0  1.5   0:00.20 /usr/sbin+
 66181 nobody    20   0  277572  35004   3564 S   0.0  1.4   0:00.15 /usr/sbin+
 66349 nobody    20   0  277928  35356   3748 S   0.0  1.5   0:00.10 /usr/sbin+
 66778 nobody    20   0  277588  35288   3832 S   0.0  1.5   0:00.08 /usr/sbin+
 66967 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 67134 nigeria   20   0  400460   5200   2392 S   0.0  0.2   0:00.00 php-fpm: +
 67169 nobody    20   0  277676  34896   3476 S   0.0  1.4   0:00.00 /usr/sbin+
 67214 nobody    20   0  277676  34820   3404 S   0.0  1.4   0:00.00 /usr/sbin+
 67215 nobody    20   0  277568  33596   2168 S   0.0  1.4   0:00.03 /usr/sbin+
 67271 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 67272 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 67273 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.00 [httpd] <+
 67280 nobody    20   0  277556  34356   3128 S   0.0  1.4   0:00.00 /usr/sbin+
 67281 nobody    20   0  277240  33872   2896 S   0.0  1.4   0:00.00 /usr/sbin+
 67305 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 67309 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 67310 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67311 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67312 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67313 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67314 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67316 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67317 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67318 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67319 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67320 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67321 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67323 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67326 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 67327 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 67328 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 67345 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67346 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67347 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67349 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 67350 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67351 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67352 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67353 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67355 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67356 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67358 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 67359 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 67369 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67376 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 67385 cloudw    20   0  366220  16592  10892 S   0.0  0.7   0:00.00 /opt/cpan+
 67390 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67391 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 67392 cloudsms  20   0  403060  13784   9396 R   0.0  0.6   0:00.00 /opt/cpan+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
 91172 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      91172  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      10709  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:3]
root      33590  0.0  0.0      0     0 ?        S    01:57   0:00  \_ [kworker/u200:1]
root      49275  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:2]
root      55126  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:0]
root      55856  0.0  0.0      0     0 ?        S    02:27   0:00  \_ [kworker/1:1]
root      59810  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/1:3]
root      60582  0.0  0.0      0     0 ?        S    02:33   0:00  \_ [kworker/0:1]
root      61247  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:4]
root      64285  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44388  3316 ?        Ss   Nov14   0:38 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  7120 ?        Ss   Nov14   0:15 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   520 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6748 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   412 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1196 ?        Ss   Nov14   0:06 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240   840 ?        Ssl  Nov14   0:03 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58728  1384 ?        Ss   Nov14   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1872 ?        Ssl  Nov14   0:22 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root      67309  0.0  0.0 183048  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67326  0.0  0.0 113284  1208 ?        Ss   02:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      67327  0.0  0.0 108052   360 ?        S    02:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      67328  0.0  0.0 113288  1516 ?        S    02:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      67393  0.0  0.0 153840  2092 ?        R    02:42   0:00  |               \_ ps auxf
root      67310  0.0  0.0 183048  2148 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67347  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      67311  0.0  0.0 183048  2148 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67349  0.0  0.0  20164   984 ?        Ss   02:42   0:00  |   \_ jailshell (cloudsms) [67390] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  67390  0.0  0.0      0     0 ?        D    02:42   0:00  |       \_ [jailshell]
root      67312  0.0  0.0 183048  2148 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67351  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      67313  0.0  0.0 183048  2148 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67352  0.0  0.0  20164   804 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      67314  0.0  0.0 183048  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67355  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      67316  0.0  0.0 183048  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67350  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      67317  0.0  0.0 183048  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67345  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67318  0.0  0.0 183048  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67353  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      67319  0.0  0.0 183048  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67346  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      67320  0.0  0.0 183048  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67356  0.0  0.0  20164   804 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      67321  0.0  0.0 183048  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67358  0.0  0.0  20164   964 ?        Ss   02:42   0:00  |   \_ jailshell (pactpay) [67369] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67369  0.0  0.0  20164   260 ?        S    02:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67373  0.0  0.7 480124 17316 ?        S    02:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      67323  0.0  0.0 183048  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      67359  0.0  0.0  20164   964 ?        Ss   02:42   0:00      \_ jailshell (nigeria) [67376] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67376  0.0  0.0  20164   256 ?        S    02:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67381  0.0  0.6 404052 16140 ?        R    02:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    20 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3952 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root      67271  0.0  0.2 157100  5072 ?        Ss   02:41   0:00  \_ sshd: unknown [priv]
sshd      67272  0.0  0.1 115644  2628 ?        S    02:41   0:00      \_ sshd: unknown [net]
root        914  0.0  0.3 1350088 8452 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1212 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46912  4128 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47280  4668 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1344 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  4380 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  46924  4388 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.4  24528 12060 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1356 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41188  2664 ?        S    01:26   0:00  \_ dovecot/auth
root      66967  0.0  0.1  60820  4508 ?        S    02:41   0:00  \_ dovecot/lmtp
root        918  0.0  0.2 261424  6768 ?        Ss   Nov14   0:07 cpsrvd (SSL) - waiting for connections                   
root      67305  0.0  0.0      0     0 ?        Z    02:41   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  2.7 1763124 67736 ?       Ssl  Nov14   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.2 298320  7184 ?        Ssl  Nov14   0:07 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   400 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   472 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.6 1054792 41052 ?       Ssl  Nov14   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   580 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 37160 ?       SLsl Nov14   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3712 ?        Ss   Nov14   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788  1000 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2664 ?        Ss   Nov14   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   67134  0.0  0.2 400460  5200 ?        S    02:41   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 14120 ?        Ssl  Nov14   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   968 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11480 ?        Ss   Nov14   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  3.9 270332 96748 ?        S    Nov14   0:04  \_ spamd child
root       8136  0.0  1.3 249228 32532 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.1 387556  3896 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.0 410480 24984 ?        Ss   Nov14   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4168 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.4 209336 10336 ?        Ss   Nov14   0:03 tailwatchd
root       1256  0.0  1.0 262224 24616 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1396 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.6 1458868 282940 ?      Sl   Nov14   5:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.2 267052 31184 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12876  1420 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1376 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12928  1436 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 11876 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    44271  0.1  1.4 277904 36284 ?        S    02:11   0:02  \_ /usr/sbin/httpd -k start
nobody    51169  0.1  1.4 277568 35900 ?        S    02:20   0:02  \_ /usr/sbin/httpd -k start
nobody    57588  0.1  1.4 277624 35932 ?        S    02:29   0:01  \_ /usr/sbin/httpd -k start
nobody    57876  0.1  1.4 277600 35724 ?        S    02:29   0:01  \_ /usr/sbin/httpd -k start
nobody    57895  0.1  1.4 277768 35716 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    59350  0.1  1.4 277608 35860 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    62275  0.1  1.4 277940 35932 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    62296  0.1  1.4 277548 35444 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    63035  0.1  1.4 277568 35476 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    63059  0.1  1.4 277576 35592 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    64912  0.1  1.4 277576 35464 ?        S    02:38   0:00  \_ /usr/sbin/httpd -k start
nobody    65121  0.1  1.4 277908 35392 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    65570  0.1  1.4 277548 35168 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    65610  0.1  1.4 277620 35492 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    66181  0.1  1.4 277572 35004 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    66349  0.1  1.4 277928 35356 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
cloudw    67385  0.0  0.6 366220 16592 ?        S    02:42   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    66778  0.2  1.4 277588 35288 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67169  0.0  1.4 277676 34896 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67214  0.0  1.4 277676 34820 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67215  0.4  1.3 277568 33596 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67273  0.0  0.0      0     0 ?        Z    02:41   0:00  \_ [httpd] <defunct>
nobody    67280  0.0  1.4 277556 34356 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67281  0.0  1.3 277240 33872 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 182280 29556 ?        Ss   00:00   0:10 lfd - sleeping
## mysql stats
Uptime: 27999  Threads: 3  Questions: 2139230  Slow queries: 0  Opens: 7970  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.403
*************************** 1. row ***************************
     Id: 29327
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 29331
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 29335
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.91.161.158 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     29 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 02:42:01 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 7 hours 46 minutes 35 seconds
   Server load: 0.14 0.23 0.27
   Total accesses: 145549 - Total Traffic: 3.5 GB - Total Duration: 78894306
   CPU Usage: u9.5 s5.96 cu1859.97 cs1522.09 - 12.1% CPU load
   5.2 requests/sec - 129.7 kB/second - 24.9 kB/request - 542.046 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 11 idle workers

WKK__K__K__WK_KKKC__K_._........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-2  64912 0/51/7413  W 1.12  0     0   3880587 0.0   1.25  171.22 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-2  63035 6/94/7208  K 2.30  1     255 3730532 179.0 2.32  169.25 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3082163307 HTTP/1.1
   2-2  57588 1/201/6989 K 5.02  0     2   3853389 8.4   4.95  175.35 74.7.227.35     http/1.1 voice.cloudsms.com.ng:443  GET / HTTP/1.1
   3-2  63059 0/120/7300 _ 2.13  0     273 3748182 0.0   2.34  171.87 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3997650239 HTTP/1.1
   4-2  65121 0/57/6868  _ 1.42  1     257 3646568 0.0   1.51  177.86 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2740070058 HTTP/1.1
   5-2  65570 5/42/6139  K 0.86  2     303 3441911 150.1 0.98  152.51 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4228395966 HTTP/1.1
   6-2  59350 0/178/6700 _ 4.25  0     5   3672809 0.0   4.44  163.86 18.214.124.6    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/images/blog/polling_un
   7-2  66181 0/29/6426  _ 0.72  0     1   3482141 0.0   0.74  155.48 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   8-2  57876 8/320/6669 K 5.39  0     406 3554783 246.5 5.13  162.22 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1910297449 HTTP/1.1
   9-2  65610 0/39/5836  _ 0.77  0     365 3102114 0.0   0.90  140.83 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3247997022 HTTP/1.1
   10-2 67169 0/4/5894   _ 0.00  0     281 3072818 0.0   0.08  148.81 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2275064878 HTTP/1.1
   11-2 66349 0/23/6028  W 0.36  0     0   3330706 0.0   0.43  156.34 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3297330175 HTTP/1.1
   12-2 66778 3/16/5408  K 0.30  3     311 3093243 90.7  0.40  138.21 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=252618872 HTTP/1.1
   13-2 67214 0/2/6072   _ 0.00  1     312 3178070 0.0   0.05  140.21 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=767461361 HTTP/1.1
   14-2 51169 1/423/5752 K 8.83  3     8   3012360 10.1  9.31  130.12 106.213.86.26   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Dandume&state=Katsina&ward=N
   15-2 62275 3/125/5538 K 2.91  0     350 2994237 91.5  3.19  147.37 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=733463057 HTTP/1.1
   16-2 67215 6/6/5146   K 0.13  0     351 2665625 184.4 0.18  113.23 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3163994777 HTTP/1.1
   17-2 67273 1/2/5218   C 0.00  0     0   2800424 0.2   0.01  126.24 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 67280 0/1/3467   _ 0.00  0     6   2036152 0.0   0.01  81.78  123.20.243.224  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Qua%27an+pan&state=Plateau&w
   19-2 44271 0/482/3820 _ 11.09 0     1   2239305 0.0   11.85 101.99 217.113.194.123 http/1.1 team.cloudware.ng:80       GET /vendor/twig/twig/doc/functions/min.rst HTTP/1.1
   20-2 67281 1/1/3390   K 0.00  0     1   1991062 5.0   0.00  86.22  74.7.228.12     http/1.1 voice.cloudsms.com.ng:443  GET /robots.txt HTTP/1.1
   21-2 57895 0/166/2639 _ 4.06  0     1   1537981 0.0   4.21  68.07  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   22-2 -     0/0/2514   . 0.00  290   0   1629649 0.0   0.00  67.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 62296 0/129/1752 _ 3.43  0     0   1045047 0.0   3.32  40.02  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-2 -     0/0/1819   . 0.00  396   0   1023693 0.0   0.00  42.93  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/999    . 0.00  1380  0   579221  0.0   0.00  23.60  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/1583   . 0.00  1287  0   934675  0.0   0.00  39.19  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/527    . 0.00  1833  0   370996  0.0   0.00  13.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/149    . 0.00  1746  0   132531  0.0   0.00  2.59   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/719    . 0.00  1825  0   391650  0.0   0.00  21.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/976    . 0.00  724   0   524298  0.0   0.00  25.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/923    . 0.00  472   0   538947  0.0   0.00  25.31  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/611    . 0.00  2635  0   340766  0.0   0.00  16.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-1 -     0/0/88     . 0.00  4587  0   55802   0.0   0.00  2.25   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1 -     0/0/312    . 0.00  4588  0   173940  0.0   0.00  8.57   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/106    . 0.00  4547  274 68641   0.0   0.00  2.42   66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285191
   36-1 -     0/0/45     . 0.00  4547  312 34406   0.0   0.00  0.88   66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1858531
   37-1 -     0/0/140    . 0.00  4607  0   94554   0.0   0.00  4.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1 -     0/0/520    . 0.00  4577  0   298993  0.0   0.00  13.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/189    . 0.00  4590  0   82924   0.0   0.00  2.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 -     0/0/390    . 0.00  4574  0   215765  0.0   0.00  10.21  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/504    . 0.00  4585  0   232467  0.0   0.00  10.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/51     . 0.00  4584  0   32716   0.0   0.00  0.81   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/146    . 0.00  4606  0   86203   0.0   0.00  3.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/526    . 0.00  4547  344 290992  0.0   0.00  16.18  66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2359430
   45-1 -     0/0/172    . 0.00  4605  0   111014  0.0   0.00  4.74   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/732    . 0.00  4589  0   247872  0.0   0.00  10.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/5      . 0.00  6447  0   13937   0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00  6473  0   4411    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/18     . 0.00  6429  0   9848    0.0   0.00  0.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/299    . 0.00  6471  0   158547  0.0   0.00  8.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/347    . 0.00  6415  0   161044  0.0   0.00  6.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/29     . 0.00  6403  0   15555   0.0   0.00  0.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/12     . 0.00  6425  0   18089   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/10     . 0.00  6449  0   4405    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4      . 0.00  6445  0   998     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00  6475  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00  6453  0   1939    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/6      . 0.00  6474  0   3734    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/1053   . 0.00  6448  0   467065  0.0   0.00  23.46  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/4      . 0.00  6446  0   13426   0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/13     . 0.00  6470  0   7394    0.0   0.00  0.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/9      . 0.00  6472  0   7635    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/5      . 0.00  6450  0   739     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/42     . 0.00  6413  0   22252   0.0   0.00  0.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/123    . 0.00  6173  0   72436   0.0   0.00  3.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/4      . 0.00  6469  0   160     0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  6468  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  6424  0   810     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/84     . 0.00  6431  0   48852   0.0   0.00  2.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/15     . 0.00  6436  0   7942    0.0   0.00  0.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/3      . 0.00  6439  0   864     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/32     . 0.00  6442  0   18076   0.0   0.00  0.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/42     . 0.00  6432  0   23305   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9      . 0.00  6467  0   4058    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/4      . 0.00  6428  0   49      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/934    . 0.00  6466  0   199287  0.0   0.00  9.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/2      . 0.00  6465  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/3      . 0.00  6464  0   4640    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  22834 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 419
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 35 seconds, (range: 3...128)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 5272
   total entries replaced since starting: 0
   total entries expired since starting: 4852
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 40 miss
   total removes since starting: 1 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit