403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.03.27.txt
 ## swap threshold exceeded
## server overview
2025-11-15.03.27 load[0] mem[63/77] mysql[3/25] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1290         165          53         907         834
Swap:          1999        1660         339
 03:27:02 up  8:31,  0 users,  load average: 0.41, 0.40, 0.39
## system overview
top - 03:27:02 up  8:31,  0 users,  load average: 0.41, 0.40, 0.39
Tasks: 207 total,   5 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 78.1 us, 15.6 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   165480 free,  1325948 used,   928872 buff/cache
KiB Swap:  2047996 total,   347972 free,  1700024 used.   849584 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1464368 327276   3156 S 131.2 13.5   6:30.49 /usr/sbin+
  3176 nigeria   20   0  404052  16144  10384 S  18.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44388   3320   1492 S   6.2  0.1   0:41.94 /usr/lib/+
   954 cpanelc+  20   0   10576   3704   2348 R   6.2  0.2   0:25.22 /usr/loca+
  3206 cloudw    20   0  366220  16592  10892 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.98 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.51 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:31.59 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.40 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.22 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.28 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.66 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:03.34 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:03.77 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.65 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   7612   7348 S   0.0  0.3   0:17.30 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    500    372 S   0.0  0.0   0:02.71 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6196   1176 S   0.0  0.3   0:00.41 queueproc+
   502 rpc       20   0   69256    100     40 S   0.0  0.0   0:00.04 /sbin/rpc+
   503 root      20   0  152780    136     92 S   0.0  0.0   0:00.02 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.69 /usr/sbin+
   519 root      20   0   52852    332    232 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1200    824 S   0.0  0.0   0:07.16 /usr/lib/+
   521 polkitd   20   0  612240    960    556 S   0.0  0.0   0:04.23 /usr/lib/+
   522 dbus      20   0   58728   1496    724 S   0.0  0.1   0:16.18 /usr/bin/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1876    820 S   0.0  0.1   0:25.21 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.89 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3708    696 S   0.0  0.2   0:00.92 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:03.87 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.82 /usr/sbin+
   914 root      20   0 1350088   8448     44 S   0.0  0.3   0:24.62 /usr/bin/+
   916 root      20   0   51656   1124    732 S   0.0  0.0   0:00.39 /usr/sbin+
   918 root      20   0  261424   6464   1440 S   0.0  0.3   0:08.24 cpsrvd (S+
   922 root      20   0 1763124 116544    992 S   0.0  4.8   0:27.22 /usr/loca+
   923 root      20   0  306512   7876   7072 S   0.0  0.3   0:08.37 /usr/sbin+
   924 root      20   0  396248    392    304 S   0.0  0.0   0:00.79 php-fpm: +
   933 root      20   0  389508    408    320 S   0.0  0.0   0:00.83 php-fpm: +
   935 named     20   0 1054792  42264   2000 S   0.0  1.7   0:17.48 /usr/sbin+
   937 root      20   0  388892    400    304 S   0.0  0.0   0:00.89 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  37444   6064 S   0.0  1.5   0:16.83 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.27 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.64 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.68 /usr/bin/+
   958 root      20   0  439788    692    592 S   0.0  0.0   0:00.87 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2656    648 S   0.0  0.1   0:04.29 php-fpm: +
   971 systuser  20   0  114016  14092   2652 S   0.0  0.6   0:07.26 /usr/loca+
   972 root      20   0  572372    964    424 S   0.0  0.0   0:02.66 /usr/bin/+
  1066 dovecot   20   0   10320    480    364 S   0.0  0.0   0:00.10 dovecot/a+
  1133 root      20   0  248092  11672    920 S   0.0  0.5   0:06.40 /usr/loca+
  1135 systuser  20   0  157704   2824    788 S   0.0  0.1   0:00.15 SonarPush+
  1173 wp-tool+  20   0  387556   3640   1396 S   0.0  0.2   0:00.32 /usr/bin/+
  1174 wp-tool+  20   0  410480  21076   1584 S   0.0  0.9   0:25.90 /usr/bin/+
  1253 root      20   0  167452   3208   1836 S   0.0  0.1   0:00.55 dnsadmin +
  1254 root      20   0  209336   9284   1256 S   0.0  0.4   0:03.36 tailwatchd
  1256 root      20   0  183900   6692   3460 S   0.0  0.3   0:03.08 cpdavd - +
  1287 mailnull  20   0   91208   4916   1748 S   0.0  0.2   0:00.00 /usr/sbin+
  1610 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1643 root      20   0  299272    448    284 S   0.0  0.0   0:00.85 php-fpm: +
  1715 root      38  18  130416   1392    712 S   0.0  0.1   0:00.08 cpanellog+
  1942 root      20   0  267052  30720   5228 S   0.0  1.3   0:03.13 /usr/sbin+
  1997 nobody    20   0  277556  35244   3824 S   0.0  1.5   0:00.08 /usr/sbin+
  1998 nobody    20   0  277568  34668   3232 S   0.0  1.4   0:00.16 /usr/sbin+
  2082 nobody    20   0  277580  35324   3880 S   0.0  1.5   0:00.11 /usr/sbin+
  2228 nobody    20   0  277568  35248   3812 S   0.0  1.5   0:00.09 /usr/sbin+
  2766 nobody    20   0  277568  33608   2176 S   0.0  1.4   0:00.04 /usr/sbin+
  2780 nobody    20   0  277796  35008   3380 S   0.0  1.4   0:00.04 /usr/sbin+
  2781 nobody    20   0  277568  33664   2236 S   0.0  1.4   0:00.01 /usr/sbin+
  3053 mailnull  20   0   91212   5612   2352 S   0.0  0.2   0:00.00 /usr/sbin+
  3064 nigeria   20   0  483556  20292   6204 S   0.0  0.8   0:00.22 php-fpm: +
  3071 nigeria   20   0  409372  16036   3940 S   0.0  0.7   0:00.19 php-fpm: +
  3073 nigeria   20   0  409372  15948   3836 S   0.0  0.7   0:00.19 php-fpm: +
  3124 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  3131 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3133 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3135 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3136 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3137 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3138 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3139 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3140 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3141 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3143 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3147 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3148 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  3149 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  3152 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  3154 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  3157 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3159 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3160 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3162 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3163 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
  3164 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  3165 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  3170 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  3175 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
  3181 mailnull  20   0   91200   4272   1160 S   0.0  0.2   0:00.00 /usr/sbin+
  3187 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
  3188 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  3191 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
  3207 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3214 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  3218 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  3220 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  3221 cloudsms  20   0  404376  15100   9800 R   0.0  0.6   0:00.00 /opt/cpan+
  3222 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  3223 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  3224 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.58 [kworker]
  8135 root      20   0  316256 144112   1980 S   0.0  6.0   0:05.36 spamd chi+
  8136 root      20   0  249228  15864    732 S   0.0  0.7   0:00.05 spamd chi+
 10032 dovenull  20   0   46912   3480   2452 S   0.0  0.1   0:00.10 dovecot/p+
 10033 dovenull  20   0   47424   4448   3056 S   0.0  0.2   0:00.07 dovecot/i+
 10034 root      20   0   10452   1168    800 S   0.0  0.0   0:00.08 dovecot/l+
 10035 dovenull  20   0   46912   4008   2936 S   0.0  0.2   0:00.10 dovecot/p+
 10036 dovenull  20   0   47172   4228   2972 S   0.0  0.2   0:00.05 dovecot/i+
 10037 root      20   0   24564  11948    956 S   0.0  0.5   0:00.05 dovecot/c+
 10038 dovecot   20   0   13568   1116    848 S   0.0  0.0   0:00.00 dovecot/s+
 10039 root      20   0   12824   1408   1180 S   0.0  0.1   0:00.80 /usr/loca+
 10040 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.71 /usr/loca+
 10041 root      20   0   12848   1424   1180 S   0.0  0.1   0:00.77 /usr/loca+
 10042 dovecot   20   0   41188   2328   1528 S   0.0  0.1   0:00.24 dovecot/a+
 10043 root      20   0   53268  10796   1412 S   0.0  0.4   0:00.05 /usr/loca+
 46515 root      20   0  182496  29828   1544 R   0.0  1.2   0:12.89 lfd - sle+
 49275 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 68158 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 78252 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 83913 root      20   0  123576    604    376 S   0.0  0.0   0:00.00 /usr/sbin+
 86479 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88687 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90748 nobody    20   0  277732  35924   4320 S   0.0  1.5   0:01.61 /usr/sbin+
 90951 root      20   0  183052   1732   1176 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
 91056 root      20   0  108056    300    228 S   0.0  0.0   0:00.00 sleep 4h +
 92323 nobody    20   0  277568  35504   4072 S   0.0  1.5   0:01.22 /usr/sbin+
 94120 root      30  10  132964   3940    400 S   0.0  0.2   0:00.00 ConfigSer+
 94131 root      30  10  108056    304    228 S   0.0  0.0   0:00.00 sleep 5883
 94475 nobody    20   0  277544  35344   3932 S   0.0  1.5   0:00.87 /usr/sbin+
 94503 nobody    20   0  277568  35560   4124 S   0.0  1.5   0:01.15 /usr/sbin+
 96233 nobody    20   0  277568  35552   4112 S   0.0  1.5   0:00.78 /usr/sbin+
 96271 nobody    20   0  277568  35412   3976 S   0.0  1.5   0:00.78 /usr/sbin+
 96585 nobody    20   0  277568  35432   3996 S   0.0  1.5   0:01.08 /usr/sbin+
 96690 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96710 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97549 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98751 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99098 nobody    20   0  277552  35576   4156 S   0.0  1.5   0:00.78 /usr/sbin+
 99685 nobody    20   0  277564  35316   3888 S   0.0  1.5   0:00.60 /usr/sbin+
 99848 nobody    20   0  277900  35428   3856 S   0.0  1.5   0:00.48 /usr/sbin+
 99865 nobody    20   0  277724  35536   3944 S   0.0  1.5   0:00.51 /usr/sbin+
101476 nobody    20   0  277804  35224   3576 S   0.0  1.5   0:00.28 /usr/sbin+
101740 nobody    20   0  277568  35128   3696 S   0.0  1.5   0:00.46 /usr/sbin+
102167 nobody    20   0  277568  35616   4184 S   0.0  1.5   0:00.18 /usr/sbin+
102178 nobody    20   0  277528  35488   4096 S   0.0  1.5   0:00.28 /usr/sbin+
102179 nobody    20   0  277568  35224   3792 S   0.0  1.5   0:00.35 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      49275  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:2]
root      68158  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/1:0]
root      78252  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:0]
root      86479  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/0:2]
root      88687  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/0:3]
root      96690  0.0  0.0      0     0 ?        S    03:17   0:00  \_ [kworker/1:3]
root      96710  0.0  0.0      0     0 ?        S    03:17   0:00  \_ [kworker/0:1]
root      97549  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:4]
root      98751  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/u200:2]
root       1610  0.0  0.0      0     0 ?        S    03:25   0:00  \_ [kworker/0:0]
root       3207  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44388  3320 ?        Ss   Nov14   0:41 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  40244  7612 ?        Ss   Nov14   0:17 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   500 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6196 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   100 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   136 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   332 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1200 ?        Ss   Nov14   0:07 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240   960 ?        Ssl  Nov14   0:04 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58728  1496 ?        Ss   Nov14   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1876 ?        Ssl  Nov14   0:25 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  1732 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   300 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root       3131  0.0  0.0 183048  2148 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3152  0.0  0.0 113284  1212 ?        Ss   03:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       3154  0.0  0.0 108052   360 ?        S    03:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       3164  0.0  0.0 113288  1520 ?        S    03:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       3226  0.0  0.0 153672  1780 ?        R    03:27   0:00  |               \_ ps auxf
root       3133  0.0  0.0 183048  2152 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3149  0.0  0.0  20164   988 ?        Ss   03:27   0:00  |   \_ jailshell (cloudsms) [3218] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms   3218  0.0  0.0      0     0 ?        D    03:27   0:00  |       \_ [jailshell]
root       3135  0.0  0.0 183048  2148 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3162  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       3136  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3165  0.0  0.0  20164   988 ?        Ss   03:27   0:00  |   \_ jailshell (cloudsms) [3222] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   3222  0.0  0.0  20164   260 ?        S    03:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   3223  0.0  0.0 113284  1212 ?        S    03:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   3224  0.0  0.4 400112 11892 ?        R    03:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root       3137  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3147  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       3138  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3157  0.0  0.0  20164   804 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       3139  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3159  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       3140  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3160  0.0  0.0  20164   808 ?        Ss   03:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       3141  0.0  0.0 183048  2140 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3163  0.0  0.0  20164   960 ?        Ss   03:27   0:00  |   \_ jailshell (pactpay) [3188] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    3188  0.0  0.0  20164   256 ?        S    03:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    3191  1.0  0.7 480124 17688 ?        S    03:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       3143  0.0  0.0 183048  2144 ?        S    03:27   0:00  \_ /usr/sbin/CROND -n
root       3148  0.0  0.0  20164   972 ?        Ss   03:27   0:00      \_ jailshell (nigeria) [3170] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3170  0.0  0.0  20164   264 ?        S    03:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3176  5.0  0.6 404052 16144 ?        S    03:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    20 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3708 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   1287  0.0  0.2  91208  4916 ?        S    03:24   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   3053  0.0  0.2  91212  5868 ?        S    03:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   3181  0.0  0.1  91200  4272 ?        S    03:27   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root       3175  0.0  0.1 111304  4448 ?        Ss   03:27   0:00  \_ sshd: [accepted]
sshd       3187  0.0  0.1 115644  2624 ?        S    03:27   0:00      \_ sshd: [net]
root        914  0.0  0.3 1350088 8448 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1124 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   480 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46912  3480 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47424  4448 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1168 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  4008 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  47172  4228 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.4  24564 11948 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1116 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.0  41188  2328 ?        S    01:26   0:00  \_ dovecot/auth
root        918  0.0  0.2 261424  6464 ?        Ss   Nov14   0:08 cpsrvd (SSL) - waiting for connections                   
root       3124  0.0  0.0      0     0 ?        Z    03:26   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  4.8 1763124 116544 ?      Ssl  Nov14   0:27 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.3 306512  7876 ?        Ssl  Nov14   0:08 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   392 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   408 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.7 1054792 42264 ?       Ssl  Nov14   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   400 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 37444 ?       SLsl Nov14   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3704 ?        Ss   Nov14   0:25 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788   692 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2656 ?        Ss   Nov14   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    3064  3.1  0.8 483556 20292 ?        S    03:26   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria    3071  2.7  0.6 409372 16036 ?        S    03:26   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria    3073  2.7  0.6 409372 15948 ?        S    03:26   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 14092 ?        Ssl  Nov14   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   964 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11672 ?        Ss   Nov14   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  5.9 316256 144112 ?       S    Nov14   0:05  \_ spamd child
root       8136  0.0  0.6 249228 15864 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2824 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.1 387556  3640 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.8 410480 21076 ?        Ss   Nov14   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  3208 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.3 209336  9284 ?        Ss   Nov14   0:03 tailwatchd
root       1256  0.0  0.2 183900  6692 ?        Ss   Nov14   0:03 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1643  0.0  0.0 299272   448 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1392 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 13.5 1464368 327276 ?      Sl   Nov14   6:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.2 267052 30720 ?        Ss   Nov14   0:03 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12824  1408 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1364 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12848  1424 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 10796 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    90748  0.1  1.4 277732 35924 ?        S    03:09   0:01  \_ /usr/sbin/httpd -k start
nobody    92323  0.1  1.4 277568 35504 ?        S    03:11   0:01  \_ /usr/sbin/httpd -k start
nobody    94475  0.1  1.4 277544 35344 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
nobody    94503  0.1  1.4 277568 35560 ?        S    03:14   0:01  \_ /usr/sbin/httpd -k start
nobody    96233  0.1  1.4 277568 35552 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96271  0.1  1.4 277568 35412 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96585  0.1  1.4 277568 35432 ?        S    03:16   0:01  \_ /usr/sbin/httpd -k start
nobody    99098  0.1  1.4 277552 35576 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    99685  0.1  1.4 277564 35316 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    99848  0.1  1.4 277900 35428 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    99865  0.1  1.4 277724 35536 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody   101476  0.0  1.4 277804 35224 ?        S    03:22   0:00  \_ /usr/sbin/httpd -k start
nobody   101740  0.1  1.4 277568 35128 ?        S    03:22   0:00  \_ /usr/sbin/httpd -k start
nobody   102167  0.0  1.4 277568 35616 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody   102178  0.1  1.4 277528 35488 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody   102179  0.1  1.4 277568 35224 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody     1997  0.0  1.4 277556 35244 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody     1998  0.1  1.4 277568 34668 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
cloudw     3206  0.0  0.6 366220 16592 ?        R    03:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     2082  0.1  1.4 277580 35324 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2228  0.1  1.4 277568 35248 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody     2766  0.1  1.3 277568 33608 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     2780  0.1  1.4 277796 35008 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     2781  0.0  1.3 277568 33664 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 182496 29828 ?        Ss   00:00   0:12 lfd - sleeping
root      83913  0.0  0.0 123576   604 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      94120  0.0  0.1 132964  3940 ?        SN   03:14   0:00 ConfigServer Version Check
root      94131  0.0  0.0 108056   304 ?        SN   03:14   0:00  \_ sleep 5883
## mysql stats
Uptime: 30700  Threads: 3  Questions: 2405373  Slow queries: 0  Opens: 10013  Flush tables: 1  Open tables: 2000  Queries per second avg: 78.350
*************************** 1. row ***************************
     Id: 32674
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 32675
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 32685
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.143.119 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 ::1 TIME_WAIT
      1 31.13.115.115 TIME_WAIT
      1 31.13.115.9 TIME_WAIT
      1 45.82.78.114 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 74.7.228.170 TIME_WAIT
      1 74.7.228.6 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 03:27:02 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 8 hours 31 minutes 36 seconds
   Server load: 0.41 0.40 0.39
   Total accesses: 158927 - Total Traffic: 3.8 GB - Total Duration: 86299925
   CPU Usage: u8.98 s6.09 cu2039.98 cs1668.29 - 12.1% CPU load
   5.18 requests/sec - 129.5 kB/second - 25.0 kB/request - 543.016 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

K.KRKR_K_K_RKKRK_RW_____........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-2  102167 2/36/8057  K 0.73 2     290 4208441 62.6  0.81  185.09 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=160410985 HTTP/1.1
   1-2  -      0/0/7866   . 0.00 18    0   4103778 0.0   0.00  186.53 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-2  99685  5/105/7643 K 2.57 1     308 4211940 152.1 2.60  191.74 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1780173279 HTTP/1.1
   3-2  101476 0/47/8015  R 1.26 115   23  4132205 0.0   1.30  187.99 116.203.129.16 http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   4-2  101740 3/74/7426  K 2.02 0     281 3952706 90.5  2.07  193.73 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2108759218 HTTP/1.1
   5-2  92323  0/213/6834 R 5.22 115   400 3766681 0.0   5.62  168.15 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=670231599 HTTP/1.1
   6-2  1997   0/16/7284  _ 0.29 1     367 3999953 0.0   0.34  178.18 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=1881808089 HTTP/1.1
   7-2  96585  3/177/7028 K 4.76 1     271 3849110 91.0  4.83  171.62 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1884940026 HTTP/1.1
   8-2  102178 0/54/7166  _ 1.17 0     11  3830390 0.0   1.28  174.94 20.215.214.24  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ibeju/lekki&state=Lagos&ward
   9-2  96233  2/134/6446 K 3.69 1     278 3448472 58.0  3.40  156.33 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2959293432 HTTP/1.1
   10-2 102179 0/62/6504  _ 1.56 0     0   3425561 0.0   1.62  164.19 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-2 94475  0/152/6709 R 3.83 98    406 3736494 0.0   3.88  173.08 102.89.75.108  http/1.1 health.oyostate.gov.ng:443
   12-2 94503  1/195/5815 K 5.02 2     256 3323082 29.3  5.07  148.57 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=66687687 HTTP/1.1
   13-2 1998   7/27/6549  K 0.73 0     376 3441939 212.3 0.78  151.33 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=497175262 HTTP/1.1
   14-2 96271  0/129/6262 R 3.43 89    275 3299063 0.0   3.48  144.03 102.89.75.108  http/1.1 health.oyostate.gov.ng:443
   15-2 99098  7/137/6002 K 3.50 2     251 3264965 217.5 3.69  162.03 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=488783
   16-2 2082   0/20/5664  _ 0.48 1     5   2963640 0.0   0.50  127.01 44.215.235.20  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/images/blog/blog/blog/ima
   17-2 90748  0/274/5607 R 7.24 6     292 3010945 0.0   7.38  135.51 20.215.214.17  http/1.1
   18-2 2228   0/17/3969  W 0.40 0     0   2301966 0.0   0.44  94.09  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-2 99848  0/83/4309  _ 2.14 1     1   2503574 0.0   2.18  112.50 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   20-2 2766   0/8/3724   _ 0.19 0     253 2175014 0.0   0.24  94.26  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2954275866 HTTP/1.1
   21-2 2780   0/8/2787   _ 0.17 1     1   1625063 0.0   0.19  71.81  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   22-2 2781   0/5/2834   _ 0.10 2     363 1803021 0.0   0.06  75.83  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=212417289 HTTP/1.1
   23-2 99865  0/93/2295  _ 2.21 2     259 1353628 0.0   2.47  54.53  66.249.70.7    http/1.1 test.cloudware.ng:443      GET /1572314132?goodscode=1570254194 HTTP/1.1
   24-2 -      0/0/1827   . 0.00 383   0   1025109 0.0   0.00  43.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -      0/0/1003   . 0.00 1004  0   579286  0.0   0.00  23.69  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -      0/0/1587   . 0.00 1003  0   934847  0.0   0.00  39.22  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -      0/0/534    . 0.00 996   0   372803  0.0   0.00  13.61  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -      0/0/151    . 0.00 1017  0   132534  0.0   0.00  2.59   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -      0/0/728    . 0.00 984   0   395767  0.0   0.00  21.60  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -      0/0/1019   . 0.00 831   0   548574  0.0   0.00  26.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -      0/0/1064   . 0.00 472   0   621708  0.0   0.00  29.31  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -      0/0/646    . 0.00 866   0   360967  0.0   0.00  17.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -      0/0/94     . 0.00 995   0   57472   0.0   0.00  2.35   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -      0/0/314    . 0.00 1016  0   173942  0.0   0.00  8.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -      0/0/111    . 0.00 1001  0   69387   0.0   0.00  2.47   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -      0/0/48     . 0.00 1010  0   35090   0.0   0.00  0.91   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -      0/0/142    . 0.00 1020  0   94558   0.0   0.00  4.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -      0/0/569    . 0.00 833   0   329438  0.0   0.00  14.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -      0/0/190    . 0.00 1027  0   82925   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -      0/0/398    . 0.00 986   0   220863  0.0   0.00  10.41  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -      0/0/756    . 0.00 24    0   373246  0.0   0.00  17.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -      0/0/52     . 0.00 1023  0   32717   0.0   0.00  0.81   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -      0/0/148    . 0.00 1014  0   86223   0.0   0.00  3.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -      0/0/527    . 0.00 1026  0   290993  0.0   0.00  16.18  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -      0/0/183    . 0.00 985   4   117015  0.0   0.00  5.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -      0/0/733    . 0.00 1025  0   247873  0.0   0.00  10.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-2 -      0/0/40     . 0.00 892   0   34842   0.0   0.00  1.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-2 -      0/0/9      . 0.00 1024  0   4412    0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -      0/0/148    . 0.00 469   0   79741   0.0   0.00  3.55   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -      0/0/300    . 0.00 1028  0   158548  0.0   0.00  8.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -      0/0/352    . 0.00 1008  0   163660  0.0   0.00  7.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/29     . 0.00 9104  0   15555   0.0   0.00  0.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/12     . 0.00 9126  0   18089   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/10     . 0.00 9150  0   4405    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/4      . 0.00 9146  0   998     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/2      . 0.00 9176  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/7      . 0.00 9154  0   1939    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/6      . 0.00 9175  0   3734    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/1053   . 0.00 9149  0   467065  0.0   0.00  23.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/4      . 0.00 9147  0   13426   0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/13     . 0.00 9171  0   7394    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/9      . 0.00 9173  0   7635    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/5      . 0.00 9151  0   739     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/42     . 0.00 9114  0   22252   0.0   0.00  0.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/123    . 0.00 8874  0   72436   0.0   0.00  3.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/4      . 0.00 9170  0   160     0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/2      . 0.00 9169  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/5      . 0.00 9125  0   810     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/84     . 0.00 9132  0   48852   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/15     . 0.00 9137  0   7942    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/3      . 0.00 9140  0   864     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/32     . 0.00 9143  0   18076   0.0   0.00  0.70   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/42     . 0.00 9133  0   23305   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/9      . 0.00 9168  0   4058    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/4      . 0.00 9129  0   49      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/934    . 0.00 9167  0   199287  0.0   0.00  9.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/2      . 0.00 9166  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/3      . 0.00 9165  0   4640    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/1      . 0.00 25535 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 343
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 27 seconds, (range: 0...141)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 8516
   total entries replaced since starting: 0
   total entries expired since starting: 8166
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 65 miss
   total removes since starting: 7 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit