403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.01.15.txt
 ## swap threshold exceeded
## server overview
2025-11-15.01.15 load[0] mem[51/80] mysql[1/12] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1039         301          63        1022        1075
Swap:          1999        1669         330
 01:15:02 up  6:19,  0 users,  load average: 0.22, 0.30, 0.33
## system overview
top - 01:15:02 up  6:19,  0 users,  load average: 0.22, 0.30, 0.33
Tasks: 203 total,   3 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 28.1 sy,  0.0 ni, 15.6 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   301856 free,  1066812 used,  1051632 buff/cache
KiB Swap:  2047996 total,   338940 free,  1709056 used.  1099020 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 279020   5244 R  62.5 11.5   4:41.39 /usr/sbin+
   742 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44388   3304   1492 S  12.5  0.1   0:32.11 /usr/lib/+
   520 root      20   0   24704   1188    824 S   6.2  0.0   0:05.30 /usr/lib/+
   717 root      20   0  188204  11092   5152 S   6.2  0.5   0:00.02 /usr/loca+
   810 cloudsms  20   0  404052  15872  10224 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.52 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.12 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:23.47 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.04 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.58 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.16 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.58 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.83 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.16 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   7996   7732 S   0.0  0.3   0:13.05 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    364    240 S   0.0  0.0   0:02.05 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   442 nigeria   20   0  401180   9060   3912 S   0.0  0.4   0:00.19 php-fpm: +
   495 root      20   0  224268   3304    820 S   0.0  0.1   0:00.30 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.02 /sbin/rpc+
   503 root      20   0  152780    128     84 S   0.0  0.0   0:00.01 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.51 /usr/sbin+
   519 root      20   0   52852    260    156 S   0.0  0.0   0:00.01 /usr/sbin+
   521 polkitd   20   0  612240    848    480 S   0.0  0.0   0:03.12 /usr/lib/+
   522 dbus      20   0   58596   1324    636 S   0.0  0.1   0:11.89 /usr/bin/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1884    828 S   0.0  0.1   0:18.56 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.66 /usr/sbin+
   569 root      20   0   24208     28      8 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   618 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
   627 mailnull  20   0   90824   3932    924 S   0.0  0.2   0:00.69 /usr/sbin+
   640 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
   641 nobody    20   0  277128  15888   2160 S   0.0  0.7   0:00.00 /usr/sbin+
   650 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   651 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   652 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   653 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   654 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   655 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   656 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   657 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   658 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   659 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   661 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:02.61 [loop0]
   663 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   665 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
   672 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
   673 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
   674 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
   694 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   696 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
   697 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
   698 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   699 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
   701 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   703 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   705 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   707 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
   708 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   710 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
   712 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   727 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
   732 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
   741 pactpay   20   0  480124  17320  11584 S   0.0  0.7   0:00.01 /opt/cpan+
   750 cloudw    20   0  366220  16592  10892 S   0.0  0.7   0:00.00 /opt/cpan+
   754 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
   761 root      20   0  160220   2060   1580 S   0.0  0.1   0:00.00 top -n 2 +
   807 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
   808 root      20   0   38648   6504   3040 R   0.0  0.3   0:00.00 /usr/loca+
   809 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.01 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:02.93 /usr/sbin+
   914 root      20   0 1350088   8464     44 S   0.0  0.3   0:24.52 /usr/bin/+
   916 root      20   0   51508    512    348 S   0.0  0.0   0:00.30 /usr/sbin+
   918 root      20   0  261424   6860   1772 S   0.0  0.3   0:06.92 cpsrvd (S+
   922 root      20   0 1763124  66772    588 S   0.0  2.8   0:13.80 /usr/loca+
   923 root      20   0  281936   7704   6760 S   0.0  0.3   0:06.30 /usr/sbin+
   924 root      20   0  396248    336    252 S   0.0  0.0   0:00.62 php-fpm: +
   933 root      20   0  389508    548    348 S   0.0  0.0   0:00.64 php-fpm: +
   935 named     20   0 1055796  38992   2036 S   0.0  1.6   0:12.89 /usr/sbin+
   937 root      20   0  388892    504    408 S   0.0  0.0   0:00.67 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  39620   5940 S   0.0  1.6   0:12.57 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.23 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.48 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.50 /usr/bin/+
   954 cpanelc+  20   0   10576   3552   2268 S   0.0  0.1   0:18.83 /usr/loca+
   958 root      20   0  439788   1192   1092 S   0.0  0.0   0:00.69 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2660    652 S   0.0  0.1   0:03.11 php-fpm: +
   971 systuser  20   0  114016  13976   2428 S   0.0  0.6   0:05.42 /usr/loca+
   972 root      20   0  572372   1000    428 S   0.0  0.0   0:02.00 /usr/bin/+
  1064 dovenull  20   0   47344   3408   2300 S   0.0  0.1   0:00.49 dovecot/p+
  1065 dovenull  20   0   47788   3404   2192 S   0.0  0.1   0:00.29 dovecot/i+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.06 dovecot/a+
  1067 root      20   0   10452    448    252 S   0.0  0.0   0:00.29 dovecot/l+
  1068 dovenull  20   0   47356   2396   1344 S   0.0  0.1   0:00.41 dovecot/p+
  1069 dovenull  20   0   47692   3016   1848 S   0.0  0.1   0:00.26 dovecot/i+
  1074 root      20   0   24528   1812    368 S   0.0  0.1   0:00.14 dovecot/c+
  1076 dovecot   20   0   13568    660    468 S   0.0  0.0   0:00.05 dovecot/s+
  1133 root      20   0  248092  11644    744 S   0.0  0.5   0:05.49 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.11 SonarPush+
  1143 dovecot   20   0   41184   1524   1036 S   0.0  0.1   0:00.57 dovecot/a+
  1173 wp-tool+  20   0  387556  10884   1776 S   0.0  0.4   0:00.26 /usr/bin/+
  1174 wp-tool+  20   0  410480  28596   1808 S   0.0  1.2   0:19.22 /usr/bin/+
  1253 root      20   0  167452   4156   2784 S   0.0  0.2   0:00.41 dnsadmin +
  1254 root      20   0  209336   8976   1984 S   0.0  0.4   0:02.53 tailwatchd
  1256 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.62 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.63 php-fpm: +
  1715 root      38  18  130416   1392    716 S   0.0  0.1   0:00.05 cpanellog+
  1942 root      20   0  266936   7364    676 S   0.0  0.3   0:02.21 /usr/sbin+
  1945 root      20   0   12860    364    236 S   0.0  0.0   0:02.63 /usr/loca+
  1946 root      20   0   12732    308    232 S   0.0  0.0   0:02.25 /usr/loca+
  1947 root      20   0   12900    384    236 S   0.0  0.0   0:02.51 /usr/loca+
  1951 root      20   0   53256     96     96 S   0.0  0.0   0:00.04 /usr/loca+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.42 [kworker]
  8135 root      20   0  266268  68972   1832 S   0.0  2.8   0:03.60 spamd chi+
  8136 root      20   0  249228  32668    736 S   0.0  1.3   0:00.05 spamd chi+
 19782 worencom  20   0   38524   2916   1724 S   0.0  0.1   0:00.03 dovecot/i+
 38128 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kworker/+
 46515 root      20   0  181560  28844   1544 S   0.0  1.2   0:04.76 lfd - sle+
 66422 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 76072 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80073 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 81090 nobody    20   0  277544  20332   4600 S   0.0  0.8   0:02.27 /usr/sbin+
 81457 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 85816 nobody    20   0  277816  20000   4364 S   0.0  0.8   0:01.97 /usr/sbin+
 88272 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90629 nobody    20   0  277548  19544   4316 S   0.0  0.8   0:01.28 /usr/sbin+
 90951 root      20   0  183052   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91056 root      20   0  108056    340    268 S   0.0  0.0   0:00.00 sleep 4h +
 91172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91990 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92047 nobody    20   0  277676  19292   4100 S   0.0  0.8   0:01.32 /usr/sbin+
 92753 nobody    20   0  277688  19060   4268 S   0.0  0.8   0:01.14 /usr/sbin+
 93393 nobody    20   0  277676  18936   4256 S   0.0  0.8   0:01.31 /usr/sbin+
 94205 nobody    20   0  277808  19168   4240 S   0.0  0.8   0:00.82 /usr/sbin+
 96649 nobody    20   0  277676  18944   3984 S   0.0  0.8   0:00.76 /usr/sbin+
 97872 nobody    20   0  277676  18608   3724 S   0.0  0.8   0:00.54 /usr/sbin+
 98007 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 99622 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99640 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99746 nobody    20   0  277812  19128   4120 S   0.0  0.8   0:00.31 /usr/sbin+
100423 nobody    20   0  277688  18172   3668 S   0.0  0.8   0:00.30 /usr/sbin+
101019 nobody    20   0  277692  18392   3844 S   0.0  0.8   0:00.21 /usr/sbin+
101392 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
101500 nobody    20   0  277676  18136   3700 S   0.0  0.7   0:00.19 /usr/sbin+
101520 nobody    20   0  277708  18380   3820 S   0.0  0.8   0:00.14 /usr/sbin+
101560 cloudw    20   0   61716   6200   4444 S   0.0  0.3   0:00.00 dovecot/l+
102248 nobody    20   0  277684  17872   3416 S   0.0  0.7   0:00.04 /usr/sbin+
102364 nobody    20   0  277812  17840   3412 S   0.0  0.7   0:00.03 /usr/sbin+
102373 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
102374 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov14   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      38128  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kworker/1:1]
root      66422  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/0:1]
root      76072  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/0:0]
root      80073  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:1]
root      81457  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:0]
root      88272  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/0:3]
root      91172  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      91990  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/1:3]
root      98007  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      99622  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:2]
root      99640  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44388  3304 ?        Ss   Nov14   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  40244  7996 ?        Ss   Nov14   0:13 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   364 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.1 224268  3304 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   128 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   260 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1188 ?        Ss   Nov14   0:05 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240   848 ?        Ssl  Nov14   0:03 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58596  1324 ?        Ss   Nov14   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1884 ?        Ssl  Nov14   0:18 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   340 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root        650  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        672  0.0  0.0 113284  1208 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root        673  0.0  0.0 108052   356 ?        S    01:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root        674  0.0  0.0 113288  1516 ?        S    01:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root        811  0.0  0.0 153672  1776 ?        R    01:15   0:00  |               \_ ps auxf
root        651  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        694  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root        652  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        703  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root        653  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        705  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root        654  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        712  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root        655  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        696  0.0  0.0  20164   984 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root        808  0.0  0.2  38648  6504 ?        R    01:15   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root        656  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        698  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root        657  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        708  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root        658  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        697  0.0  0.0  20164   988 ?        Ss   01:15   0:00  |   \_ jailshell (cloudsms) [807] hell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms    807  0.0  0.0  20164   260 ?        S    01:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms    809  0.0  0.0 113284  1212 ?        S    01:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms    810  0.0  0.6 404052 15872 ?        R    01:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root        659  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        701  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root        661  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        707  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root        717  0.0  0.4 188204 11092 ?        S    01:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root        761  0.0  0.0 160220  2060 ?        S    01:15   0:00  |           \_ top -n 2 -b -c
root        663  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        710  0.0  0.0  20164   968 ?        Ss   01:15   0:00  |   \_ jailshell (pactpay) [732] shell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay     732  0.0  0.0  20164   264 ?        S    01:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay     741  0.0  0.7 480124 17320 ?        R    01:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root        665  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root        699  0.0  0.0  20164   968 ?        Ss   01:15   0:00      \_ jailshell (nigeria) [727] shell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria     727  0.0  0.0  20164   264 ?        S    01:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria     742  0.0  0.6 404052 16136 ?        S    01:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    28 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3932 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:02 /usr/sbin/sshd -D
root     102373  0.0  0.1 111304  4268 ?        Ss   01:14   0:00  \_ sshd: [accepted]
sshd     102374  0.0  0.1 115644  2628 ?        S    01:14   0:00  |   \_ sshd: [net]
root        618  0.0  0.1 111304  4268 ?        Ss   01:14   0:00  \_ sshd: [accepted]
root        914  0.1  0.3 1350088 8464 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51508   512 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1064  0.0  0.1  47344  3408 ?        S    Nov14   0:00  \_ dovecot/pop3-login
dovenull   1065  0.0  0.1  47788  3404 ?        S    Nov14   0:00  \_ dovecot/imap-login
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
root       1067  0.0  0.0  10452   448 ?        S    Nov14   0:00  \_ dovecot/log
dovenull   1068  0.0  0.0  47356  2396 ?        S    Nov14   0:00  \_ dovecot/pop3-login
dovenull   1069  0.0  0.1  47692  3016 ?        S    Nov14   0:00  \_ dovecot/imap-login
root       1074  0.0  0.0  24528  1812 ?        S    Nov14   0:00  \_ dovecot/config
dovecot    1076  0.0  0.0  13568   660 ?        S    Nov14   0:00  \_ dovecot/stats
dovecot    1143  0.0  0.0  41184  1524 ?        S    Nov14   0:00  \_ dovecot/auth
worencom  19782  0.0  0.1  38524  2916 ?        S    Nov14   0:00  \_ dovecot/imap
root     101392  0.0  0.1  41052  2728 ?        S    01:13   0:00  \_ dovecot/auth -w
cloudw   101560  0.0  0.2  61716  6200 ?        S    01:13   0:00  \_ dovecot/lmtp
root        918  0.0  0.2 261424  6860 ?        Ss   Nov14   0:06 cpsrvd (SSL) - waiting for connections                   
root        640  0.0  0.0      0     0 ?        Z    01:14   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  2.7 1763124 66772 ?       Ssl  Nov14   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.3 281936  7704 ?        Ssl  Nov14   0:06 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   336 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   548 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.6 1055796 38992 ?       Ssl  Nov14   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   504 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.6 5654304 39620 ?       SLsl Nov14   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3552 ?        Ss   Nov14   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788  1192 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2660 ?        Ss   Nov14   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria     442  1.1  0.3 401180  9060 ?        S    01:14   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 13976 ?        Ssl  Nov14   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372  1000 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11644 ?        Ss   Nov14   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  2.8 266268 68972 ?        S    Nov14   0:03  \_ spamd child
root       8136  0.0  1.3 249228 32668 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.4 387556 10884 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410480 28596 ?        Ss   Nov14   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4156 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.3 209336  8976 ?        Ss   Nov14   0:02 tailwatchd
root       1256  0.0  1.0 262224 24616 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1392 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.5 1458868 279020 ?      Sl   Nov14   4:41 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  0.3 266936  7364 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12860   364 ?        S    Nov14   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   308 ?        S    Nov14   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12900   384 ?        S    Nov14   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1951  0.0  0.0  53256    96 ?        S    Nov14   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    81090  0.1  0.8 277544 20332 ?        S    00:47   0:02  \_ /usr/sbin/httpd -k start
cloudw      750  0.0  0.6 366220 16592 ?        S    01:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    85816  0.1  0.8 277816 20000 ?        S    00:54   0:01  \_ /usr/sbin/httpd -k start
nobody    90629  0.1  0.8 277548 19544 ?        S    00:59   0:01  \_ /usr/sbin/httpd -k start
nobody    92047  0.1  0.7 277676 19292 ?        S    01:01   0:01  \_ /usr/sbin/httpd -k start
nobody    92753  0.1  0.7 277688 19060 ?        S    01:02   0:01  \_ /usr/sbin/httpd -k start
nobody    93393  0.1  0.7 277676 18936 ?        S    01:03   0:01  \_ /usr/sbin/httpd -k start
nobody    94205  0.1  0.7 277808 19168 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    96649  0.1  0.7 277676 18944 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    97872  0.1  0.7 277676 18608 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    99746  0.1  0.7 277812 19128 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody   100423  0.1  0.7 277688 18172 ?        S    01:12   0:00  \_ /usr/sbin/httpd -k start
nobody   101019  0.1  0.7 277692 18392 ?        S    01:12   0:00  \_ /usr/sbin/httpd -k start
nobody   101500  0.2  0.7 277676 18136 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody   101520  0.1  0.7 277708 18380 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody   102248  0.1  0.7 277684 17872 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody   102364  0.1  0.7 277812 17840 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
nobody      641  0.0  0.6 277128 15888 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.1 181560 28844 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 22780  Threads: 3  Questions: 1747082  Slow queries: 0  Opens: 6589  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.693
*************************** 1. row ***************************
     Id: 23663
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-15' LIMIT 1
*************************** 2. row ***************************
     Id: 23666
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `29` WHERE `phone`='2348101091017' LIMIT 1
*************************** 3. row ***************************
     Id: 23669
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.175 TIME_WAIT
      1 186.235.99.49 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.130.9.111 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 85.204.245.177 TIME_WAIT
      1 85.254.180.80 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 212.102.57.70 TIME_WAIT
      2 66.249.70.199 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 01:15:02 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 19 minutes 36 seconds
   Server load: 0.22 0.30 0.33
   Total accesses: 119024 - Total Traffic: 2.8 GB - Total Duration: 65401825
   CPU Usage: u9.3 s5.54 cu1518.78 cs1249.04 - 12.2% CPU load
   5.23 requests/sec - 130.4 kB/second - 25.0 kB/request - 549.484 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KKK__KWWK_KKKK.K.K....................K.........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  96649  3/129/5942 K 3.41  3     303 3124840 91.8  3.57  136.19 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1749043364 HTTP/1.1
   1-0  90629  4/232/5723 K 5.94  4     393 3047552 125.8 5.99  137.91 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=396963537 HTTP/1.1
   2-0  92047  3/310/5600 K 5.99  0     356 3152196 90.3  5.82  143.08 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1715410663 HTTP/1.1
   3-0  97872  0/109/5865 _ 2.41  0     14  3055991 0.0   2.73  139.18 162.120.187.117 http/1.1 nigeriadecide.org:443      GET /polling_unit_locator.php?state=Kano&lga=Madobi&ward=Kubara
   4-0  101019 0/40/5612  _ 0.95  0     0   2994292 0.0   0.99  147.18 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  102364 1/6/4812   K 0.11  3     288 2838937 29.7  0.16  124.77 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=591679292 HTTP/1.1
   6-0  81090  1/404/5520 W 11.15 0     0   3054014 31.2  10.04 133.81 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1429197354 HTTP/1.1
   7-0  92753  0/200/5145 W 5.15  0     0   2811387 0.0   5.40  125.29 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  100423 2/85/5266  K 1.15  1     345 2878652 54.1  2.43  129.20 66.249.70.5     http/1.1 test.cloudware.ng:80       GET /?1827423314?goodscode=1825029026 HTTP/1.1
   9-0  641    0/1/4832   _ 0.00  0     0   2609612 0.0   0.02  117.88 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   10-0 102248 2/7/4843   K 0.16  1     310 2500997 58.5  0.19  112.14 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4058816376 HTTP/1.1
   11-0 99746  2/57/4930  K 1.32  2     312 2754943 62.9  2.87  130.35 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=759006461 HTTP/1.1
   12-0 93393  2/232/4388 K 5.79  2     253 2589375 61.8  6.27  114.81 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1170193114 HTTP/1.1
   13-0 101500 8/33/5035  K 0.86  4     271 2636452 243.0 0.91  116.43 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=128007425 HTTP/1.1
   14-0 -      0/0/4659   . 0.00  71    0   2424120 0.0   0.00  105.51 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 101520 7/28/4694  K 0.53  1     279 2605964 209.5 0.67  118.14 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3031681058 HTTP/1.1
   16-0 -      0/0/4464   . 0.00  111   0   2263686 0.0   0.00  97.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 94205  2/155/4291 K 4.12  3     309 2352342 64.1  3.80  106.06 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2898982162 HTTP/1.1
   18-0 -      0/0/3162   . 0.00  253   0   1867602 0.0   0.00  73.87  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -      0/0/3099   . 0.00  224   0   1838929 0.0   0.00  83.99  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -      0/0/2810   . 0.00  1216  0   1654868 0.0   0.00  70.76  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -      0/0/2441   . 0.00  1215  0   1430934 0.0   0.00  63.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -      0/0/2078   . 0.00  1175  0   1392531 0.0   0.00  56.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/1467   . 0.00  927   0   881800  0.0   0.00  33.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/1309   . 0.00  953   0   798093  0.0   0.00  31.65  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -      0/0/830    . 0.00  894   5   492438  0.0   0.00  19.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/1160   . 0.00  678   0   698550  0.0   0.00  25.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/505    . 0.00  1218  0   363533  0.0   0.00  13.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/107    . 0.00  1243  0   112824  0.0   0.00  1.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/491    . 0.00  1221  0   273848  0.0   0.00  15.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/277    . 0.00  1242  0   155489  0.0   0.00  8.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/426    . 0.00  1241  0   262941  0.0   0.00  12.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/360    . 0.00  1214  0   215424  0.0   0.00  10.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/81     . 0.00  1240  0   54191   0.0   0.00  2.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/301    . 0.00  891   0   173921  0.0   0.00  8.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/92     . 0.00  1200  0   66835   0.0   0.00  2.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/25     . 0.00  1236  0   28432   0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/139    . 0.00  1211  0   94553   0.0   0.00  4.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 85816  6/355/474  K 9.66  0     402 279613  178.9 9.22  12.23  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3833187516 HTTP/1.1
   39-0 -      0/0/179    . 0.00  1238  0   82865   0.0   0.00  2.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/376    . 0.00  1201  0   210087  0.0   0.00  9.93   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/495    . 0.00  112   0   230649  0.0   0.00  10.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/37     . 0.00  1235  0   31543   0.0   0.00  0.76   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/145    . 0.00  984   0   86202   0.0   0.00  3.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/506    . 0.00  1239  0   278450  0.0   0.00  15.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/171    . 0.00  1233  0   111013  0.0   0.00  4.74   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/724    . 0.00  1219  0   246773  0.0   0.00  10.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/5      . 0.00  1228  0   13937   0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/8      . 0.00  1254  0   4411    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/18     . 0.00  1210  0   9848    0.0   0.00  0.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/299    . 0.00  1252  0   158547  0.0   0.00  8.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/347    . 0.00  1196  0   161044  0.0   0.00  6.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/29     . 0.00  1184  0   15555   0.0   0.00  0.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/12     . 0.00  1206  0   18089   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/10     . 0.00  1230  0   4405    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/4      . 0.00  1226  0   998     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/2      . 0.00  1256  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/7      . 0.00  1234  0   1939    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/6      . 0.00  1255  0   3734    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/1053   . 0.00  1229  0   467065  0.0   0.00  23.46  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/4      . 0.00  1227  0   13426   0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/13     . 0.00  1251  0   7394    0.0   0.00  0.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/9      . 0.00  1253  0   7635    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/5      . 0.00  1231  0   739     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/42     . 0.00  1194  0   22252   0.0   0.00  0.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/123    . 0.00  954   0   72436   0.0   0.00  3.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/4      . 0.00  1250  0   160     0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/2      . 0.00  1249  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/5      . 0.00  1205  0   810     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/84     . 0.00  1212  0   48852   0.0   0.00  2.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/15     . 0.00  1217  0   7942    0.0   0.00  0.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/3      . 0.00  1220  0   864     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/32     . 0.00  1223  0   18076   0.0   0.00  0.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/42     . 0.00  1213  0   23305   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/9      . 0.00  1248  0   4058    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/4      . 0.00  1209  0   49      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/934    . 0.00  1247  0   199287  0.0   0.00  9.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/2      . 0.00  1246  0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/3      . 0.00  1245  0   4640    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/1      . 0.00  17615 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 326
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 34 seconds, (range: 2...133)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 30203
   total entries replaced since starting: 0
   total entries expired since starting: 29861
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 255 miss
   total removes since starting: 16 hit, 15 miss
Youez - 2016 - github.com/yon3zu
LinuXploit