403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.10.48.txt
 ## swap threshold exceeded
## server overview
2025-11-10.10.48 load[0] mem[57/59] mysql[1/10] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1308         169          24         886         871
Swap:          1999        1282         717
 10:48:01 up  1:03,  0 users,  load average: 0.22, 0.39, 0.44
## system overview
top - 10:48:01 up  1:03,  0 users,  load average: 0.22, 0.39, 0.44
Tasks: 201 total,   8 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 47.1 us, 41.2 sy,  0.0 ni,  8.8 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   168132 free,  1344100 used,   908068 buff/cache
KiB Swap:  2047996 total,   735228 free,  1312768 used.   887356 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
     1 root      20   0   44392   3444   1520 S  20.0  0.1   0:06.35 /usr/lib/+
   492 dbus      20   0   58724   1356    636 R  13.3  0.1   0:02.03 /usr/bin/+
   361 root      20   0   40240   5304   4988 S   6.7  0.2   0:02.15 /usr/lib/+
   410 root      16  -4   55532    508    380 S   6.7  0.0   0:00.34 /sbin/aud+
  1750 mysql     20   0 1462268 230896   3128 S   6.7  9.5   0:53.50 /usr/sbin+
 25080 nobody    20   0  277936  20820   4668 S   6.7  0.9   0:01.37 /usr/sbin+
 38195 nigeria   20   0  400652  15936  10220 S   6.7  0.7   0:00.01 /opt/cpan+
 38200 pactpay   20   0  476460  15968  10412 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:04.56 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:08.17 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   110 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.81 [kworker/+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   265 root       0 -20       0      0      0 S   0.0  0.0   0:00.65 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   387 root      20   0   45352    296    148 S   0.0  0.0   0:00.33 /usr/lib/+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   478 root      20   0   52852    320    228 S   0.0  0.0   0:00.00 /usr/sbin+
   479 root      20   0   21540    408    296 S   0.0  0.0   0:00.09 /usr/sbin+
   482 root      20   0   24692   1200    828 S   0.0  0.0   0:00.90 /usr/lib/+
   491 root      20   0  152780    136     92 S   0.0  0.0   0:00.00 /usr/sbin+
   496 nscd      20   0  861368   1396    772 S   0.0  0.1   0:01.84 /usr/sbin+
   501 rpc       20   0   69256    216    108 S   0.0  0.0   0:00.01 /sbin/rpc+
   516 root      20   0    4388     84     80 S   0.0  0.0   0:00.00 /usr/sbin+
   518 polkitd   20   0  610540   2988    504 R   0.0  0.1   0:00.54 /usr/lib/+
   526 root      20   0  224148   5576    892 S   0.0  0.2   0:00.11 queueproc+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   549 root      20   0  124476    460    328 S   0.0  0.0   0:00.11 /usr/sbin+
   550 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  114704     80     80 S   0.0  0.0   0:00.02 /bin/bash
   565 root      20   0  108296     84     80 S   0.0  0.0   0:00.00 /sbin/age+
   566 mailnull  20   0   89116   3596    520 S   0.0  0.1   0:00.07 /usr/sbin+
   630 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   682 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [loop0]
   691 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   703 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0  153404    340    256 S   0.0  0.0   0:00.08 pure-ftpd+
   928 root      20   0  572372    988    408 S   0.0  0.0   0:00.42 /usr/bin/+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   932 telegraf  20   0 5654048  35496   6140 S   0.0  1.5   0:02.28 /usr/loca+
   934 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   936 root      20   0   51508    540    376 S   0.0  0.0   0:00.07 /usr/sbin+
   937 systuser  20   0  113932   1976      0 S   0.0  0.1   0:00.00 /usr/loca+
   938 root      20   0  111304    448    348 S   0.0  0.0   0:00.46 /usr/sbin+
   940 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.07 /usr/bin/+
   941 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   942 systuser  20   0  114016  13940   2772 S   0.0  0.6   0:01.03 /usr/loca+
   946 systuser  20   0  111864   1828      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 root      20   0  385496   1180    460 S   0.0  0.0   0:00.18 php-fpm: +
   971 root      20   0  436392  11328  11124 S   0.0  0.5   0:00.23 php-fpm: +
   979 root      20   0  386112    528    324 S   0.0  0.0   0:00.16 php-fpm: +
   985 root      20   0  392856    628    452 S   0.0  0.0   0:00.18 php-fpm: +
   986 root      20   0  261172   6808   1780 S   0.0  0.3   0:01.66 cpsrvd (S+
   988 root      20   0  397344   3268    668 S   0.0  0.1   0:00.55 php-fpm: +
   992 root      20   0 1763112 338072   1580 S   0.0 14.0   0:14.18 /usr/loca+
   999 named     20   0  711664  26960   1352 S   0.0  1.1   0:02.47 /usr/sbin+
  1007 root      20   0  224592   5668   4124 S   0.0  0.2   0:01.04 /usr/sbin+
  1016 cpanelc+  20   0   10024   2956   2324 S   0.0  0.1   0:03.23 /usr/loca+
  1080 dovenull  20   0   46912   1144    532 S   0.0  0.0   0:00.04 dovecot/p+
  1081 dovenull  20   0   47332   2800   1808 S   0.0  0.1   0:00.06 dovecot/i+
  1082 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.01 dovecot/a+
  1083 root      20   0   10452    444    268 S   0.0  0.0   0:00.04 dovecot/l+
  1084 dovenull  20   0   46912   2120   1484 S   0.0  0.1   0:00.08 dovecot/p+
  1085 dovenull  20   0   47344   2524   1540 S   0.0  0.1   0:00.04 dovecot/i+
  1091 root      20   0   24528   2392    520 S   0.0  0.1   0:00.04 dovecot/c+
  1092 dovecot   20   0   13568    644    420 S   0.0  0.0   0:00.00 dovecot/s+
  1154 dovecot   20   0   41056   1464   1032 S   0.0  0.1   0:00.09 dovecot/a+
  1155 wp-tool+  20   0  387528  12976   1352 S   0.0  0.5   0:00.11 /usr/bin/+
  1158 wp-tool+  20   0  410452  36332   1240 S   0.0  1.5   0:03.31 /usr/bin/+
  1175 root      20   0  248140 117692   1084 S   0.0  4.9   0:03.28 /usr/loca+
  1193 systuser  20   0  157700   2912    888 S   0.0  0.1   0:00.03 SonarPush+
  1260 root      20   0  209276  11932   2340 S   0.0  0.5   0:00.50 tailwatchd
  1266 root      20   0  262224  24692   6768 S   0.0  1.0   0:00.39 cpdavd - +
  1267 root      20   0  167452   1328    728 S   0.0  0.1   0:00.09 dnsadmin +
  1677 root      20   0  299272    768    388 S   0.0  0.0   0:00.10 php-fpm: +
  1706 root      38  18  130416   1436    712 S   0.0  0.1   0:00.01 cpanellog+
  1994 root      20   0  267016   8472    712 S   0.0  0.4   0:00.32 /usr/sbin+
  2017 root      20   0   12868    372    264 S   0.0  0.0   0:00.28 /usr/loca+
  2018 root      20   0   12732    300    220 S   0.0  0.0   0:00.24 /usr/loca+
  2019 root      20   0   12908    368    252 S   0.0  0.0   0:00.27 /usr/loca+
  2047 root      20   0   53268    128    128 S   0.0  0.0   0:00.04 /usr/loca+
  2243 root      20   0  181264   9988   1148 S   0.0  0.4   0:03.87 lfd - sle+
  4913 nobody    20   0  277736  20896   4808 S   0.0  0.9   0:03.04 /usr/sbin+
  6595 root      20   0  275108 142096   3820 S   0.0  5.9   0:00.62 spamd chi+
  6596 root      20   0  248140 116848    316 S   0.0  4.8   0:00.00 spamd chi+
 10719 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 11471 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 11472 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.06 [kworker]
 11856 root      20   0 1341636  10016    132 S   0.0  0.4   0:00.08 /usr/bin/+
 11890 root      20   0 1277312  11280    132 S   0.0  0.5   0:00.06 /usr/bin/+
 22590 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 22647 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 25117 nobody    20   0  277936  20864   4688 S   0.0  0.9   0:01.63 /usr/sbin+
 25142 root      20   0       0      0      0 D   0.0  0.0   0:00.05 [kworker/+
 27476 nobody    20   0  277924  20864   4664 S   0.0  0.9   0:01.37 /usr/sbin+
 27480 nobody    20   0  277560  20768   4804 S   0.0  0.9   0:01.06 /usr/sbin+
 28030 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 28044 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30656 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31024 nobody    20   0  277940  20940   4640 S   0.0  0.9   0:01.09 /usr/sbin+
 31046 nobody    20   0  277928  20408   4424 S   0.0  0.8   0:00.79 /usr/sbin+
 32756 nobody    20   0  277924  20152   4300 S   0.0  0.8   0:00.73 /usr/sbin+
 33429 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 33716 nobody    20   0  277800  20168   4204 S   0.0  0.8   0:00.54 /usr/sbin+
 33831 worencom  20   0   38508   4264   3172 S   0.0  0.2   0:00.01 dovecot/i+
 34561 nobody    20   0  277800  19892   4120 S   0.0  0.8   0:00.46 /usr/sbin+
 35486 nobody    20   0  277944  19732   4000 S   0.0  0.8   0:00.30 /usr/sbin+
 35490 nobody    20   0  277932  19768   4000 S   0.0  0.8   0:00.39 /usr/sbin+
 35491 nobody    20   0  277536  19460   3996 S   0.0  0.8   0:00.20 /usr/sbin+
 35880 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 36043 nobody    20   0  277800  19432   3764 S   0.0  0.8   0:00.08 /usr/sbin+
 36582 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 37470 worencom  20   0   29148   2728   2232 S   0.0  0.1   0:00.00 dovecot/q+
 37509 worencom  20   0   61452   5944   4448 S   0.0  0.2   0:00.03 dovecot/l+
 37667 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38086 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38094 root      20   0  111304   4444   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 38095 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 38108 nigeria   20   0  397064   5540   2184 S   0.0  0.2   0:00.00 php-fpm: +
 38120 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 38124 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38125 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38126 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38127 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38128 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38129 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38130 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38131 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38132 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38133 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38134 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38135 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38136 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38138 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38139 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38140 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 38142 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 38143 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 38165 root      20   0  160240   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 38166 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 38167 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38169 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 38170 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38171 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 38172 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38173 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38175 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38176 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38177 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38178 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 38179 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 38181 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38182 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38185 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 38192 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38193 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 38197 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 38198 saboakin  20   0  400652  15144   9844 R   0.0  0.6   0:00.00 /opt/cpan+
 38199 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 38201 cloudsms  20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
 38203 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:44   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:44   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:44   0:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [deferwq]
root        110  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/1:1H]
root        251  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_0]
root        252  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_1]
root        253  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ttm_swap]
root        265  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/0:1H]
root        279  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [xprtiod]
root        630  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kvm-irqfd-clean]
root        682  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [loop0]
root        691  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [jbd2/loop0-8]
root        703  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root      10719  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [kworker/0:4]
root      22590  0.0  0.0      0     0 ?        S    10:20   0:00  \_ [kworker/1:4]
root      22647  0.0  0.0      0     0 ?        S    10:20   0:00  \_ [kworker/0:3]
root      25142  0.0  0.0      0     0 ?        D    10:23   0:00  \_ [kworker/u200:0]
root      38206  0.0  0.0      0     0 ?        R    10:48   0:00  |   \_ [kworker/u200:0]
root      28030  0.0  0.0      0     0 ?        S    10:29   0:00  \_ [kworker/0:0]
root      28044  0.0  0.0      0     0 ?        S    10:29   0:00  \_ [kworker/1:3]
root      30656  0.0  0.0      0     0 ?        S    10:34   0:00  \_ [kworker/1:1]
root      33429  0.0  0.0      0     0 ?        S    10:39   0:00  \_ [kworker/0:2]
root      35880  0.0  0.0      0     0 ?        D    10:44   0:00  \_ [kworker/1:0]
root      36582  0.0  0.0      0     0 ?        S    10:45   0:00  \_ [kworker/0:1]
root      37667  0.0  0.0      0     0 ?        S    10:47   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44392  3444 ?        Ss   09:44   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.2  40240  5308 ?        Ss   09:44   0:02 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   296 ?        Ss   09:44   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   508 ?        S<sl 09:44   0:00 /sbin/auditd
root        478  0.0  0.0  52852   320 ?        Ss   09:44   0:00 /usr/sbin/smartd -n -q never
root        479  0.0  0.0  21540   408 ?        Ss   09:44   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0  24692  1200 ?        Ss   09:44   0:00 /usr/lib/systemd/systemd-logind
root        491  0.0  0.0 152780   136 ?        Ss   09:44   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        492  0.0  0.0  58724  1356 ?        Ss   09:44   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        496  0.0  0.0 861368  1396 ?        Ssl  09:44   0:01 /usr/sbin/nscd
rpc         501  0.0  0.0  69256   216 ?        Ss   09:44   0:00 /sbin/rpcbind -w
root        516  0.0  0.0   4388    84 ?        Ss   09:44   0:00 /usr/sbin/acpid
polkitd     518  0.0  0.1 610540  2988 ?        Ssl  09:44   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        526  0.0  0.2 224148  5576 ?        Ss   09:44   0:00 queueprocd - waiting up to 60s to process a task
root        530  0.0  0.0 195208     0 ?        Ssl  09:44   0:00 /usr/sbin/gssproxy -D
root        549  0.0  0.0 124476   460 ?        Ss   09:44   0:00 /usr/sbin/crond -n
root      38124  0.0  0.0 183044  2148 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38140  0.0  0.0 113284  1212 ?        Ss   10:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      38142  0.0  0.0 108052   356 ?        S    10:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      38143  0.0  0.0 113288  1512 ?        S    10:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      38204  0.0  0.0 153840  2092 ?        R    10:48   0:00  |               \_ ps auxf
root      38125  0.0  0.0 183044  2148 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38178  0.0  0.0  20164   964 ?        Ss   10:48   0:00  |   \_ jailshell (cloudsms) [38199] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  38199  0.0  0.0  20164   256 ?        S    10:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  38201  0.0  0.0 113284  1212 ?        S    10:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  38205  0.0  0.6 400652 14624 ?        R    10:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      38126  0.0  0.0 183044  2148 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38167  0.0  0.0  20164   808 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      38127  0.0  0.0 183044  2148 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38181  0.0  0.0  20164   804 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      38129  0.0  0.0 183044  2148 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38182  0.0  0.0  20164   808 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      38130  0.0  0.0 183044  2144 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38175  0.0  0.0  20164   808 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      38131  0.0  0.0 183044  2144 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38176  0.0  0.0  20164   808 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      38132  0.0  0.0 183044  2144 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38170  0.0  0.0  20164   808 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      38133  0.0  0.0 183044  2140 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38172  0.0  0.0  20164   808 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      38134  0.0  0.0 183044  2140 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38173  0.0  0.0  20164   804 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      38135  0.0  0.0 183044  2140 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38177  0.0  0.0  20164   808 ?        Ss   10:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      38136  0.0  0.0 183044  2140 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38179  0.0  0.0  20164   968 ?        Ss   10:48   0:00  |   \_ jailshell (pactpay) [38197] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38197  0.0  0.0  20164   264 ?        S    10:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38200  0.0  0.6 476460 15968 ?        Sl   10:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      38138  0.0  0.0 183044  2140 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38171  0.0  0.0  20164   968 ?        Ss   10:48   0:00  |   \_ jailshell (nigeria) [38193] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38193  0.0  0.0  20164   264 ?        S    10:48   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38195  0.0  0.6 400652 15936 ?        S    10:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      38139  0.0  0.0 183044  2144 ?        S    10:48   0:00  \_ /usr/sbin/CROND -n
root      38169  0.0  0.0  20164   964 ?        Ss   10:48   0:00      \_ jailshell (saboakin) [38192] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  38192  0.0  0.0  20164   260 ?        S    10:48   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  38198  0.0  0.6 400652 15408 ?        R    10:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        550  0.0  0.0  24208     0 ?        Ss   09:44   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 114704    80 ttyS0    Ss+  09:44   0:00 /bin/bash
root        565  0.0  0.0 108296    84 tty1     Ss+  09:44   0:00 /sbin/agetty --noclear tty1 linux
mailnull    566  0.0  0.1  89116  3596 ?        Ss   09:44   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0 153404   340 ?        Ss   09:44   0:00 pure-ftpd (SERVER)
root        928  0.0  0.0 572372   988 ?        Ssl  09:44   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    930  0.0  0.0  10132    48 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    932  0.0  1.4 5654048 35496 ?       SLsl 09:44   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    934  0.0  0.0  11348    40 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        936  0.0  0.0  51508   540 ?        Ss   09:44   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  1144 ?        S    09:44   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47332  2800 ?        S    09:44   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   420 ?        S    09:44   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   444 ?        S    09:44   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46912  2120 ?        S    09:44   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47344  2524 ?        S    09:44   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2392 ?        S    09:44   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   644 ?        S    09:44   0:00  \_ dovecot/stats
dovecot    1154  0.0  0.0  41056  1464 ?        S    09:44   0:00  \_ dovecot/auth
worencom  33831  0.0  0.1  38508  4264 ?        S    10:40   0:00  \_ dovecot/imap
worencom  37470  0.0  0.1  29148  2728 ?        S    10:46   0:00  \_ dovecot/quota-status -p postfix
worencom  37509  0.0  0.2  61452  5944 ?        S    10:46   0:00  \_ dovecot/lmtp
systuser    937  0.0  0.0 113932  1976 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 111304   448 ?        Ss   09:44   0:00 /usr/sbin/sshd -D
root      38086  0.0  0.1 111304  4264 ?        Ss   10:47   0:00  \_ sshd: [accepted]
root      38094  0.0  0.1 111304  4444 ?        Ss   10:47   0:00  \_ sshd: [accepted]
sshd      38095  0.0  0.1 115644  2628 ?        S    10:47   0:00      \_ sshd: [net]
memcach+    940  0.0  0.0 342400     0 ?        Ssl  09:44   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        941  0.0  0.1 445028  2604 ?        Ss   09:44   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    942  0.0  0.5 114016 13940 ?        Ssl  09:44   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    946  0.0  0.0 111864  1828 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        952  0.0  0.0 385496  1180 ?        Ss   09:44   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        971  0.0  0.4 436392 11328 ?        Ss   09:44   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        979  0.0  0.0 386112   528 ?        Ss   09:44   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        985  0.0  0.0 392856   628 ?        Ss   09:44   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        986  0.0  0.2 261172  6808 ?        Ss   09:44   0:01 cpsrvd (SSL) - waiting for connections                   
root      38120  0.0  0.0      0     0 ?        Z    10:48   0:00  \_ [cpaneld - servi] <defunct>
root        988  0.0  0.1 397344  3268 ?        Ss   09:44   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   38108  0.0  0.2 397064  5540 ?        S    10:47   0:00  \_ php-fpm: pool nigeriadecide_org
root        992  0.3 13.9 1763112 338072 ?      Ssl  09:44   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       999  0.0  1.1 711664 26960 ?        Ssl  09:44   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1007  0.0  0.2 224592  5668 ?        Ssl  09:44   0:01 /usr/sbin/rsyslogd -n
cpanelc+   1016  0.0  0.1  10024  2956 ?        Rs   09:44   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
wp-tool+   1155  0.0  0.5 387528 12976 ?        Ss   09:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1158  0.0  1.5 410452 36332 ?        Ss   09:44   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1175  0.0  4.8 248140 117692 ?       Ss   09:44   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6595  0.0  5.8 275108 142096 ?       S    09:51   0:00  \_ spamd child
root       6596  0.0  4.8 248140 116848 ?       S    09:51   0:00  \_ spamd child
systuser   1193  0.0  0.1 157700  2912 ?        S    09:44   0:00 SonarPush 0.6.12 [sleeping]
root       1260  0.0  0.4 209276 11932 ?        Ss   09:44   0:00 tailwatchd
root       1266  0.0  1.0 262224 24692 ?        Ss   09:44   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1267  0.0  0.0 167452  1328 ?        Ss   09:44   0:00 dnsadmin - dormant mode
root       1677  0.0  0.0 299272   768 ?        Ss   09:44   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1706  0.0  0.0 130416  1436 ?        SN   09:44   0:00 cpanellogd - sleeping for logs
mysql      1750  1.4  9.5 1462268 230896 ?      Sl   09:44   0:53 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1994  0.0  0.3 267016  8472 ?        Ss   09:45   0:00 /usr/sbin/httpd -k start
root       2017  0.0  0.0  12868   372 ?        S    09:45   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2018  0.0  0.0  12732   300 ?        S    09:45   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2019  0.0  0.0  12908   368 ?        S    09:45   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2047  0.0  0.0  53268   128 ?        S    09:45   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     4913  0.0  0.8 277736 20896 ?        S    09:48   0:03  \_ /usr/sbin/httpd -k start
nobody    25080  0.0  0.8 277936 20820 ?        S    10:23   0:01  \_ /usr/sbin/httpd -k start
nobody    25117  0.1  0.8 277936 20864 ?        S    10:23   0:01  \_ /usr/sbin/httpd -k start
nobody    27476  0.1  0.8 277924 20864 ?        S    10:27   0:01  \_ /usr/sbin/httpd -k start
nobody    27480  0.0  0.8 277560 20768 ?        S    10:27   0:01  \_ /usr/sbin/httpd -k start
nobody    31024  0.1  0.8 277940 20940 ?        S    10:34   0:01  \_ /usr/sbin/httpd -k start
nobody    31046  0.1  0.8 277928 20408 ?        S    10:34   0:00  \_ /usr/sbin/httpd -k start
nobody    32756  0.1  0.8 277924 20152 ?        S    10:37   0:00  \_ /usr/sbin/httpd -k start
nobody    33716  0.1  0.8 277800 20168 ?        S    10:39   0:00  \_ /usr/sbin/httpd -k start
nobody    34561  0.1  0.8 277800 19892 ?        S    10:41   0:00  \_ /usr/sbin/httpd -k start
nobody    35486  0.1  0.8 277944 19732 ?        S    10:43   0:00  \_ /usr/sbin/httpd -k start
nobody    35490  0.1  0.8 277932 19768 ?        S    10:43   0:00  \_ /usr/sbin/httpd -k start
nobody    35491  0.0  0.8 277536 19460 ?        S    10:43   0:00  \_ /usr/sbin/httpd -k start
nobody    36043  0.0  0.8 277800 19432 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
root       2243  0.1  0.4 181264  9988 ?        Ss   09:45   0:03 lfd - sleeping
oysipao+  11471  0.0  0.0   3148   416 ?        Ss   10:00   0:00 [kworker]
oysipao+  11472  0.0  0.0   3152   492 ?        S    10:00   0:00  \_ [kworker]
root      11856  0.0  0.4 1341636 10016 ?       Ssl  10:00   0:00 /usr/bin/cspdaemon
root      11890  0.0  0.4 1277312 11280 ?       Ssl  10:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 3785  Threads: 3  Questions: 245749  Slow queries: 0  Opens: 2385  Flush tables: 1  Open tables: 1955  Queries per second avg: 64.927
*************************** 1. row ***************************
     Id: 4481
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 4482
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 4487
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.248.90.230 TIME_WAIT
      1 107.20.18.163 TIME_WAIT
      1 109.105.209.12 TIME_WAIT
      1 114.119.128.143 TIME_WAIT
      1 114.119.133.35 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 142.44.228.18 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.85.160.245 TIME_WAIT
      1 54.157.99.244 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 109.105.209.13 TIME_WAIT
      3 109.105.209.15 TIME_WAIT
      5 45.82.121.130 TIME_WAIT
      6 109.105.209.14 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 10:48:01 WAT
   Restart Time: Monday, 10-Nov-2025 09:45:02 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 2 minutes 59 seconds
   Server load: 0.53 0.45 0.46
   Total accesses: 11791 - Total Traffic: 264.7 MB - Total Duration: 5181490
   CPU Usage: u9.61 s3.76 cu132.85 cs103.56 - 6.61% CPU load
   3.12 requests/sec - 71.7 kB/second - 23.0 kB/request - 439.444 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

W._K_.RK_.RK_K_.............................K...................
.............K..................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                        Request
   0-0  36043 0/17/874  W 0.38  0    0   301373 0.0   0.36  18.08 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  -     0/0/703   . 0.00  3    0   299897 0.0   0.00  14.65 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  27476 0/248/756 _ 6.48  0    1   284890 0.0   5.78  14.84 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   3-0  27480 2/228/690 K 4.12  2    339 290280 63.9  6.35  16.90 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=631938422 HTTP/1.1
   4-0  32756 0/139/747 _ 3.63  0    0   261334 0.0   3.19  16.59 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  -     0/0/609   . 0.00  240  0   240136 0.0   0.00  14.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  31024 0/190/630 R 4.95  5    263 312202 0.0   4.79  16.64 102.90.100.181 http/1.1 cloudsms.com.ng:443
   7-0  34561 3/81/550  K 2.02  0    341 250150 95.2  1.95  15.59 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=350446905 HTTP/1.1
   8-0  35486 0/62/552  _ 1.63  1    292 245343 0.0   1.31  13.11 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3281967153 HTTP/1.1
   9-0  -     0/0/776   . 0.00  230  0   229339 0.0   0.00  13.71 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 31046 0/149/484 R 3.40  4    263 230749 0.0   3.52  11.90 102.90.100.181 http/1.1 cloudsms.com.ng:443
   11-0 35490 8/89/529  K 2.15  1    406 189882 250.4 1.33  12.40 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=494473413 HTTP/1.1
   12-0 33716 0/96/488  _ 2.41  0    1   254821 0.0   2.23  12.50 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   13-0 35491 1/42/364  K 1.06  2    351 166423 35.5  0.89  8.78  66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=2416378257 HTTP/1.1
   14-0 4913  0/640/640 _ 12.82 2    0   223068 0.0   13.65 13.65 35.199.19.148  http/1.1 newwebsite.cloudware.ng:80 HEAD /wordpress/ HTTP/1.1
   15-0 -     0/0/334   . 0.00  1406 0   135438 0.0   0.00  7.86  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/155   . 0.00  1429 0   72786  0.0   0.00  3.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/103   . 0.00  1413 0   47598  0.0   0.00  3.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/253   . 0.00  653  0   96808  0.0   0.00  5.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/5     . 0.00  1422 0   1889   0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/299   . 0.00  1428 0   56637  0.0   0.00  3.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/4     . 0.00  1445 0   1699   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/2     . 0.00  1443 0   1893   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/14    . 0.00  1359 0   9563   0.0   0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/63    . 0.00  1127 0   30598  0.0   0.00  1.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/2     . 0.00  1442 0   7026   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/6     . 0.00  1410 0   3365   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/5     . 0.00  1424 0   6922   0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/4     . 0.00  1415 0   2429   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00  1444 0   6966   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/3     . 0.00  1423 0   3126   0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/6     . 0.00  1411 0   8923   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/3     . 0.00  1417 0   12148  0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00  1407 0   11058  0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00  1426 0   9037   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/2     . 0.00  1438 0   11230  0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/3     . 0.00  1425 0   7247   0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2     . 0.00  1441 0   8125   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/2     . 0.00  1435 0   13593  0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00  1440 0   8140   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/59    . 0.00  1128 0   36627  0.0   0.00  1.61  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/109   . 0.00  891  0   54175  0.0   0.00  2.42  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/15    . 0.00  1360 0   14611  0.0   0.00  0.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2     . 0.00  1439 0   9531   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 25080 1/300/300 K 6.11  0    311 238038 33.7  6.34  6.34  66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=827500657 HTTP/1.1
   45-0 -     0/0/7     . 0.00  1398 0   14062  0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/3     . 0.00  1421 0   11309  0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/131   . 0.00  530  0   184067 0.0   0.00  2.95  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4     . 0.00  1408 0   12719  0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/1     . 0.00  1457 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/1     . 0.00  1450 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/1     . 0.00  1455 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/3     . 0.00  1418 0   33     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/4     . 0.00  1416 4   4250   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/1     . 0.00  1452 0   1      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00  1431 0   1257   0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/3     . 0.00  1420 0   962    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00  1436 0   10772  0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/2     . 0.00  1430 0   615    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/1     . 0.00  1460 3   4      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/1     . 0.00  1456 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/52    . 0.00  1191 0   37149  0.0   0.00  1.24  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/2     . 0.00  1432 0   18     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4     . 0.00  1409 0   1118   0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1     . 0.00  1458 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/5     . 0.00  1405 0   1359   0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/1     . 0.00  1453 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00  1446 0   1939   0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/6     . 0.00  1399 0   3137   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1     . 0.00  1437 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/6     . 0.00  1414 0   4135   0.0   0.00  0.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/1     . 0.00  1451 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/2     . 0.00  1434 0   12402  0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/5     . 0.00  1396 0   693    0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/1     . 0.00  1459 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1     . 0.00  1454 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/8     . 0.00  1395 0   1269   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 25117 1/322/322 K 7.51  3    307 138616 36.0  7.83  7.83  66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=767147848 HTTP/1.1
   78-0 -     0/0/44    . 0.00  1192 0   32451  0.0   0.00  0.96  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 705
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...124)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 7933
   total entries replaced since starting: 0
   total entries expired since starting: 7223
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 18 miss
   total removes since starting: 5 hit, 32 miss
Youez - 2016 - github.com/yon3zu
LinuXploit