403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.01.36.txt
 ## swap threshold exceeded
## server overview
2025-11-15.01.36 load[0] mem[51/77] mysql[1/12] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1059         269          64        1034        1054
Swap:          1999        1643         356
 01:36:01 up  6:40,  0 users,  load average: 0.21, 0.35, 0.36
## system overview
top - 01:36:01 up  6:40,  0 users,  load average: 0.21, 0.35, 0.36
Tasks: 200 total,   5 running, 193 sleeping,   0 stopped,   2 zombie
%Cpu(s): 54.5 us, 42.4 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   266628 free,  1093740 used,  1059932 buff/cache
KiB Swap:  2047996 total,   365052 free,  1682944 used.  1070796 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 275864   4464 S  31.2 11.4   4:57.94 /usr/sbin+
     1 root      20   0   44388   3304   1492 S   6.2  0.1   0:33.63 /usr/lib/+
 10105 nobody    20   0  277592  35404   3948 S   6.2  1.5   0:00.91 /usr/sbin+
 17424 pactpay   20   0  479860  16172  10576 S   6.2  0.7   0:00.01 /opt/cpan+
 17451 nigeria   20   0  404052  16144  10384 S   6.2  0.7   0:00.01 /opt/cpan+
 17456 cloudsms  20   0  404052  15616  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.58 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:24.77 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.10 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.83 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.64 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.65 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.93 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.23 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   5148   4888 S   0.0  0.2   0:13.88 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    352    240 R   0.0  0.0   0:02.19 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6852   1820 S   0.0  0.3   0:00.35 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.01 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.54 /usr/sbin+
   519 root      20   0   52852    452    352 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1188    828 S   0.0  0.0   0:05.57 /usr/lib/+
   521 polkitd   20   0  612240    848    480 S   0.0  0.0   0:03.29 /usr/lib/+
   522 dbus      20   0   58596   1324    636 R   0.0  0.1   0:12.53 /usr/bin/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1868    832 S   0.0  0.1   0:19.57 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.70 /usr/sbin+
   569 root      20   0   24208     28      8 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3924    916 S   0.0  0.2   0:00.73 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.01 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.12 /usr/sbin+
   914 root      20   0 1350088   8456     44 S   0.0  0.3   0:24.53 /usr/bin/+
   916 root      20   0   51656   1240    848 S   0.0  0.1   0:00.32 /usr/sbin+
   918 root      20   0  261424   6712   1736 S   0.0  0.3   0:07.11 cpsrvd (S+
   922 root      20   0 1763124  67972    948 S   0.0  2.8   0:13.82 /usr/loca+
   923 root      20   0  290128   5308   4380 S   0.0  0.2   0:06.69 /usr/sbin+
   924 root      20   0  396248    284    200 S   0.0  0.0   0:00.65 php-fpm: +
   933 root      20   0  389508    384    300 S   0.0  0.0   0:00.67 php-fpm: +
   935 named     20   0 1054792  39436   2292 S   0.0  1.6   0:13.71 /usr/sbin+
   937 root      20   0  388892    500    404 S   0.0  0.0   0:00.72 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  37360   6072 S   0.0  1.5   0:13.25 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.23 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.50 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.54 /usr/bin/+
   954 cpanelc+  20   0   10576   3720   2364 S   0.0  0.2   0:19.85 /usr/loca+
   958 root      20   0  439788   1252   1152 S   0.0  0.1   0:00.72 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2660    652 S   0.0  0.1   0:03.29 php-fpm: +
   971 systuser  20   0  114016  14104   2588 S   0.0  0.6   0:05.71 /usr/loca+
   972 root      20   0  572372    968    428 S   0.0  0.0   0:02.10 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.08 dovecot/a+
  1133 root      20   0  248092  11488    744 S   0.0  0.5   0:05.63 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.12 SonarPush+
  1173 wp-tool+  20   0  387556   5660   1556 S   0.0  0.2   0:00.27 /usr/bin/+
  1174 wp-tool+  20   0  410480  28868   1996 S   0.0  1.2   0:20.27 /usr/bin/+
  1253 root      20   0  167452   4272   2900 S   0.0  0.2   0:00.46 dnsadmin +
  1254 root      20   0  209336   9004   1984 S   0.0  0.4   0:02.66 tailwatchd
  1256 root      20   0  183900   6688   3460 S   0.0  0.3   0:02.64 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.67 php-fpm: +
  1715 root      38  18  130416   1396    716 S   0.0  0.1   0:00.05 cpanellog+
  1942 root      20   0  267052  32064   6572 S   0.0  1.3   0:02.60 /usr/sbin+
  3093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.44 [kworker]
  7268 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8135 root      20   0  270332 101828   4780 S   0.0  4.2   0:03.93 spamd chi+
  8136 root      20   0  249228  32540    736 S   0.0  1.3   0:00.05 spamd chi+
  9166 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
  9837 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10032 dovenull  20   0   46772   3580   2736 S   0.0  0.1   0:00.00 dovecot/p+
 10033 dovenull  20   0   47152   4744   3628 S   0.0  0.2   0:00.01 dovecot/i+
 10034 root      20   0   10452   1524   1156 S   0.0  0.1   0:00.00 dovecot/l+
 10035 dovenull  20   0   46912   4372   3364 S   0.0  0.2   0:00.01 dovecot/p+
 10036 dovenull  20   0   46780   3588   2740 S   0.0  0.1   0:00.00 dovecot/i+
 10037 root      20   0   24528  12316   1488 S   0.0  0.5   0:00.01 dovecot/c+
 10038 dovecot   20   0   13568   1568   1300 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12844   1308   1124 S   0.0  0.1   0:00.05 /usr/loca+
 10040 root      20   0   12732   1308   1128 S   0.0  0.1   0:00.05 /usr/loca+
 10041 root      20   0   12892   1568   1220 S   0.0  0.1   0:00.04 /usr/loca+
 10042 dovecot   20   0   41056   2916   2184 S   0.0  0.1   0:00.02 dovecot/a+
 10043 root      20   0   53268  11916   2532 S   0.0  0.5   0:00.05 /usr/loca+
 10044 nobody    20   0  277544  35264   3804 S   0.0  1.5   0:00.92 /usr/sbin+
 10047 nobody    20   0  277600  35368   3880 S   0.0  1.5   0:00.91 /usr/sbin+
 10078 nobody    20   0  277880  35780   4200 S   0.0  1.5   0:00.85 /usr/sbin+
 10087 nobody    20   0  277544  35424   4012 S   0.0  1.5   0:00.89 /usr/sbin+
 10092 nobody    20   0  277572  35680   4240 S   0.0  1.5   0:00.74 /usr/sbin+
 10129 nobody    20   0  277572  35516   4080 S   0.0  1.5   0:00.72 /usr/sbin+
 10238 nobody    20   0  277604  35396   3928 S   0.0  1.5   0:00.95 /usr/sbin+
 10376 worencom  20   0   38384   3668   2880 S   0.0  0.2   0:00.00 dovecot/i+
 10709 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10765 nobody    20   0  277564  35284   3856 S   0.0  1.5   0:00.87 /usr/sbin+
 12687 nobody    20   0  277688  35696   4144 S   0.0  1.5   0:00.56 /usr/sbin+
 13684 nobody    20   0  277868  35460   3892 S   0.0  1.5   0:00.39 /usr/sbin+
 14458 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15265 nobody    20   0  277548  35104   3696 S   0.0  1.5   0:00.28 /usr/sbin+
 15521 nobody    20   0  277900  35216   3616 S   0.0  1.5   0:00.25 /usr/sbin+
 15552 nobody    20   0  277544  35336   3932 S   0.0  1.5   0:00.21 /usr/sbin+
 15553 nobody    20   0  277572  35068   3636 S   0.0  1.4   0:00.22 /usr/sbin+
 16835 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 16996 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 17079 nigeria   20   0  401436   9620   4052 S   0.0  0.4   0:00.39 php-fpm: +
 17118 nobody    20   0  277788  35108   3600 S   0.0  1.5   0:00.03 /usr/sbin+
 17311 mailnull  20   0   91208   5860   2580 S   0.0  0.2   0:00.00 /usr/sbin+
 17377 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 17379 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17380 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17381 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17382 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17383 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17384 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17385 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17386 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17387 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17388 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17390 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17391 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17392 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17393 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17396 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 17397 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 17398 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 17420 root      20   0  160244   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 17421 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 17423 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17426 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17428 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17429 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17430 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17431 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 17432 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17433 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17434 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17435 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17436 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 17437 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17439 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 17448 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17453 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17454 robocal+  20   0   20164    256      0 R   0.0  0.0   0:00.00 jailshell+
 17455 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 17457 robocal+  20   0       0      0      0 Z   0.0  0.0   0:00.00 [bash] <d+
 38128 root      20   0       0      0      0 S   0.0  0.0   0:00.31 [kworker/+
 46515 root      20   0  181772  29056   1544 S   0.0  1.2   0:06.14 lfd - sle+
 81457 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
 91172 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 98007 root      20   0       0      0      0 R   0.0  0.0   0:00.10 [kworker/+
 99640 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov14   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      38128  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kworker/1:1]
root      81457  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:0]
root      91172  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      98007  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      99640  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:4]
root       3093  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:0]
root       7268  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/0:1]
root       9166  0.0  0.0      0     0 ?        D    01:25   0:00  \_ [kworker/u200:0]
root      17459  0.0  0.0      0     0 ?        R    01:36   0:00  |   \_ [kworker/u200:0]
root       9837  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/1:2]
root      10709  0.0  0.0      0     0 ?        D    01:27   0:00  \_ [kworker/0:3]
root      14458  0.0  0.0      0     0 ?        S    01:32   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44388  3304 ?        Ss   Nov14   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  5148 ?        Ss   Nov14   0:13 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   352 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6852 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   452 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1188 ?        Ss   Nov14   0:05 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240   848 ?        Ssl  Nov14   0:03 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58596  1324 ?        Rs   Nov14   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1868 ?        Ssl  Nov14   0:19 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root      17379  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17396  0.0  0.0 113284  1212 ?        Ss   01:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      17397  0.0  0.0 108052   360 ?        S    01:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      17398  0.0  0.0 113288  1516 ?        S    01:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      17460  0.0  0.0 153840  2096 ?        R    01:36   0:00  |               \_ ps auxf
root      17380  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17435  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      17381  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17428  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      17382  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17433  0.0  0.0  20164   804 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      17383  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17430  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      17384  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17434  0.0  0.0  20164   804 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      17385  0.0  0.0 183048  2144 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17439  0.0  0.0  20164   968 ?        Ss   01:36   0:00  |   \_ jailshell (cloudsms) [17453] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  17453  0.0  0.0  20164   260 ?        S    01:36   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  17455  0.0  0.0 113284  1212 ?        S    01:36   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  17456  0.0  0.6 404052 15616 ?        S    01:36   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      17386  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17426  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      17387  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17429  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      17388  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17432  0.0  0.0  20164   804 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      17390  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17437  0.0  0.0  20164   804 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      17391  0.0  0.0 183048  2144 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17421  0.0  0.0  20164   968 ?        Ss   01:36   0:00  |   \_ jailshell (pactpay) [17423] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17423  0.0  0.0  20164   260 ?        S    01:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17424  0.0  0.6 479860 16172 ?        Sl   01:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      17392  0.0  0.0 183048  2144 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17436  0.0  0.0  20164   968 ?        Ss   01:36   0:00  |   \_ jailshell (robocallscloudsm) [17454]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  17454  0.0  0.0      0     0 ?        D    01:36   0:00  |       \_ [jailshell]
root      17393  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      17431  0.0  0.0  20164   968 ?        Ss   01:36   0:00      \_ jailshell (nigeria) [17448] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17448  0.0  0.0  20164   260 ?        S    01:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17451  0.0  0.6 404052 16144 ?        S    01:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    28 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3924 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17311  0.0  0.2  91208  5860 ?        S    01:35   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root      16996  0.0  0.1 111304  4268 ?        Ss   01:35   0:00  \_ sshd: [accepted]
root        914  0.1  0.3 1350088 8456 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1240 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46772  3580 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47152  4744 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1524 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  4372 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  46780  3588 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.5  24528 12316 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1568 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41056  2916 ?        S    01:26   0:00  \_ dovecot/auth
worencom  10376  0.0  0.1  38384  3668 ?        S    01:26   0:00  \_ dovecot/imap
root      16835  0.0  0.1  60820  4508 ?        S    01:35   0:00  \_ dovecot/lmtp
root        918  0.0  0.2 261424  6712 ?        Ss   Nov14   0:07 cpsrvd (SSL) - waiting for connections                   
root      17377  0.0  0.0      0     0 ?        Z    01:35   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  2.8 1763124 67972 ?       Ssl  Nov14   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.2 290128  5308 ?        Ssl  Nov14   0:06 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   284 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   384 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.6 1054792 39436 ?       Ssl  Nov14   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   500 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 37360 ?       SLsl Nov14   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3720 ?        Ss   Nov14   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788  1252 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2660 ?        Ss   Nov14   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   17079  1.1  0.3 401436  9620 ?        S    01:35   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 14104 ?        Ssl  Nov14   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   968 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11488 ?        Ss   Nov14   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  4.2 270332 101828 ?       S    Nov14   0:03  \_ spamd child
root       8136  0.0  1.3 249228 32540 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.2 387556  5660 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410480 28868 ?        Ss   Nov14   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4272 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.3 209336  9004 ?        Ss   Nov14   0:02 tailwatchd
root       1256  0.0  0.2 183900  6688 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1396 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.3 1458868 275864 ?      Sl   Nov14   4:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.3 267052 32064 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12844  1308 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1308 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12892  1568 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 11916 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    10044  0.1  1.4 277544 35264 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10047  0.1  1.4 277600 35368 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10078  0.1  1.4 277880 35780 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10087  0.1  1.4 277544 35424 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10092  0.1  1.4 277572 35680 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10105  0.1  1.4 277592 35404 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10129  0.1  1.4 277572 35516 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10238  0.1  1.4 277604 35396 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10765  0.1  1.4 277564 35284 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody    12687  0.1  1.4 277688 35696 ?        S    01:29   0:00  \_ /usr/sbin/httpd -k start
nobody    13684  0.1  1.4 277868 35460 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    15265  0.1  1.4 277548 35104 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    15521  0.1  1.4 277900 35216 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    15552  0.1  1.4 277544 35336 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    15553  0.1  1.4 277572 35068 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    17118  0.0  1.4 277788 35108 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 181772 29056 ?        Ss   00:00   0:06 lfd - sleeping
## mysql stats
Uptime: 24039  Threads: 3  Questions: 1838228  Slow queries: 0  Opens: 7056  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.468
*************************** 1. row ***************************
     Id: 24934
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 24939
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `16` WHERE `phone`='2347068993992' LIMIT 1
*************************** 3. row ***************************
     Id: 24942
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 159.148.158.55 TIME_WAIT
      1 159.148.62.37 TIME_WAIT
      1 166.0.229.124 TIME_WAIT
      1 170.23.16.167 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 177.91.253.205 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.116 TIME_WAIT
      1 51.161.37.177 TIME_WAIT
      1 51.68.247.196 TIME_WAIT
      1 52.167.144.211 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.198 TIME_WAIT
      2 66.249.70.200 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 01:36:01 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 6 hours 40 minutes 35 seconds
   Server load: 0.21 0.35 0.36
   Total accesses: 125399 - Total Traffic: 3.0 GB - Total Duration: 68444148
   CPU Usage: u7.37 s4.93 cu1604.31 cs1316.79 - 12.2% CPU load
   5.22 requests/sec - 129.7 kB/second - 24.9 kB/request - 545.811 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KKK_KKRK..KKWKKKWK..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-2  10078 2/153/6319 K 3.59 0     380 3316460 60.3  3.85  144.94 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=835700
   1-2  15521 8/43/6065  K 1.09 1     269 3204508 243.0 1.20  145.55 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2743834136 HTTP/1.1
   2-2  10087 3/156/5923 K 3.86 0     425 3314957 89.2  4.03  150.48 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3021463975 HTTP/1.1
   3-2  10092 0/141/6223 _ 3.34 0     0   3206593 0.0   3.43  146.74 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-2  10105 2/158/5945 K 3.94 0     370 3158501 59.4  4.70  155.30 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=121117
   5-2  13684 8/71/5140  K 1.71 2     308 2995899 241.7 1.82  131.97 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1759287
   6-2  10129 0/136/5872 R 3.31 17    270 3221810 0.0   3.17  143.03 52.196.248.7   http/1.1
   7-2  15265 1/48/5496  K 1.10 1     277 2998170 29.8  1.24  133.36 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1697588
   8-2  -     0/0/5526   . 0.00 22    0   3012293 0.0   0.00  137.75 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-2  -     0/0/5187   . 0.00 16    0   2729656 0.0   0.00  124.03 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-2 10047 1/161/5207 K 4.38 1     361 2688655 29.9  4.31  120.85 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1726088
   11-2 15552 6/41/5304  K 0.86 1     269 2931824 183.3 0.95  138.92 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2994092128 HTTP/1.1
   12-2 10238 0/166/4692 W 4.95 0     0   2748414 0.0   4.60  122.29 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-2 10765 5/145/5386 K 4.08 4     410 2831392 154.5 3.97  124.78 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2944986666 HTTP/1.1
   14-2 15553 4/39/4920  K 0.92 2     294 2549378 119.8 0.99  110.71 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2570805
   15-2 17118 2/6/4898   K 0.06 1     405 2694331 65.5  0.14  122.05 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1529962146 HTTP/1.1
   16-2 12687 4/97/4682  W 2.74 0     0   2389907 126.5 2.72  102.32 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2178840
   17-2 10044 1/158/4649 K 4.03 2     315 2535682 29.8  4.22  114.38 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1828818
   18-2 -     0/0/3238   . 0.00 135   0   1909575 0.0   0.00  75.74  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-1 -     0/0/3110   . 0.00 644   0   1841751 0.0   0.00  84.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 -     0/0/2940   . 0.00 170   0   1726341 0.0   0.00  74.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-1 -     0/0/2451   . 0.00 639   0   1433151 0.0   0.00  63.49  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-1 -     0/0/2090   . 0.00 621   0   1395326 0.0   0.00  56.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-1 -     0/0/1472   . 0.00 640   0   881812  0.0   0.00  33.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 -     0/0/1336   . 0.00 585   437 809272  0.0   0.00  32.18  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1109120
   25-1 -     0/0/853    . 0.00 587   161 497487  0.0   0.00  19.81  216.244.66.229 http/1.1 team.cloudware.ng:80       GET /vendor/symfony/security-core/Exception/LockedException.php
   26-1 -     0/0/1178   . 0.00 619   0   699257  0.0   0.00  25.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1 -     0/0/524    . 0.00 587   294 370975  0.0   0.00  13.49  66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=707305
   28-1 -     0/0/124    . 0.00 583   408 117703  0.0   0.00  1.92   66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=100207661 HTTP/1.1
   29-1 -     0/0/494    . 0.00 642   0   273852  0.0   0.00  15.18  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 -     0/0/292    . 0.00 616   0   155517  0.0   0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-1 -     0/0/428    . 0.00 641   0   262945  0.0   0.00  12.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-1 -     0/0/378    . 0.00 587   289 222924  0.0   0.00  10.60  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=833058
   33-1 -     0/0/88     . 0.00 627   0   55802   0.0   0.00  2.25   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1 -     0/0/312    . 0.00 628   0   173940  0.0   0.00  8.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/106    . 0.00 587   274 68641   0.0   0.00  2.42   66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285191
   36-1 -     0/0/45     . 0.00 587   312 34406   0.0   0.00  0.88   66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1858531
   37-1 -     0/0/140    . 0.00 647   0   94554   0.0   0.00  4.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1 -     0/0/520    . 0.00 617   0   298993  0.0   0.00  13.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/189    . 0.00 630   0   82924   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 -     0/0/390    . 0.00 614   0   215765  0.0   0.00  10.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/504    . 0.00 625   0   232467  0.0   0.00  10.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/51     . 0.00 624   0   32716   0.0   0.00  0.81   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/146    . 0.00 646   0   86203   0.0   0.00  3.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/526    . 0.00 587   344 290992  0.0   0.00  16.18  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2359430
   45-1 -     0/0/172    . 0.00 645   0   111014  0.0   0.00  4.74   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/732    . 0.00 629   0   247872  0.0   0.00  10.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/5      . 0.00 2487  0   13937   0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 2513  0   4411    0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/18     . 0.00 2469  0   9848    0.0   0.00  0.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/299    . 0.00 2511  0   158547  0.0   0.00  8.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/347    . 0.00 2455  0   161044  0.0   0.00  6.97   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/29     . 0.00 2443  0   15555   0.0   0.00  0.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/12     . 0.00 2465  0   18089   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/10     . 0.00 2489  0   4405    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4      . 0.00 2485  0   998     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00 2515  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00 2493  0   1939    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/6      . 0.00 2514  0   3734    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/1053   . 0.00 2488  0   467065  0.0   0.00  23.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/4      . 0.00 2486  0   13426   0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/13     . 0.00 2510  0   7394    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/9      . 0.00 2512  0   7635    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/5      . 0.00 2490  0   739     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/42     . 0.00 2453  0   22252   0.0   0.00  0.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/123    . 0.00 2213  0   72436   0.0   0.00  3.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/4      . 0.00 2509  0   160     0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00 2508  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00 2464  0   810     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/84     . 0.00 2471  0   48852   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/15     . 0.00 2476  0   7942    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/3      . 0.00 2479  0   864     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/32     . 0.00 2482  0   18076   0.0   0.00  0.70   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/42     . 0.00 2472  0   23305   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9      . 0.00 2507  0   4058    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/4      . 0.00 2468  0   49      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/934    . 0.00 2506  0   199287  0.0   0.00  9.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/2      . 0.00 2505  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/3      . 0.00 2504  0   4640    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 18874 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 323
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 23 seconds, (range: 3...103)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 613
   total entries replaced since starting: 0
   total entries expired since starting: 290
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit