403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.21.06.txt
 ## swap threshold exceeded
## server overview
2025-11-10.21.06 load[0] mem[56/77] mysql[5/10] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1200          99         121        1063         856
Swap:          1999        1631         368
 21:06:01 up 11:21,  0 users,  load average: 0.13, 0.19, 0.18
## system overview
top - 21:06:01 up 11:21,  0 users,  load average: 0.13, 0.19, 0.18
Tasks: 200 total,   3 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 79.4 us, 14.7 sy,  0.0 ni,  5.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   101376 free,  1230000 used,  1088924 buff/cache
KiB Swap:  2047996 total,   377596 free,  1670400 used.   875960 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1478216 289552   3568 S 131.2 12.0   9:28.89 /usr/sbin+
 69186 nigeria   20   0  400652  15940  10220 R  18.8  0.7   0:00.05 /opt/cpan+
 69132 root      20   0  162436   5832   4340 S   6.2  0.2   0:00.01 sshd: roo+
     1 root      20   0   44392   3668   1704 S   0.0  0.2   0:59.85 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.07 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.15 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:43.56 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.10 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.10 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.65 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   110 root      20   0       0      0      0 S   0.0  0.0   0:00.84 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [kworker/+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.98 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40240   7860   7600 S   0.0  0.3   0:21.10 /usr/lib/+
   387 root      20   0   45352    152    148 S   0.0  0.0   0:00.33 /usr/lib/+
   410 root      16  -4   55532    500    372 S   0.0  0.0   0:03.45 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   478 root      20   0   52852    436    324 S   0.0  0.0   0:00.01 /usr/sbin+
   479 root      20   0   21540    384    296 S   0.0  0.0   0:00.93 /usr/sbin+
   482 root      20   0   24692   1204    824 S   0.0  0.0   0:09.53 /usr/lib/+
   491 root      20   0  152780    160    116 S   0.0  0.0   0:00.02 /usr/sbin+
   492 dbus      20   0   58724   1480    724 S   0.0  0.1   0:21.67 /usr/bin/+
   496 nscd      20   0 1197256   1732    804 S   0.0  0.1   0:19.87 /usr/sbin+
   501 rpc       20   0   69256    168    108 S   0.0  0.0   0:00.04 /sbin/rpc+
   516 root      20   0    4388     84     80 S   0.0  0.0   0:00.00 /usr/sbin+
   518 polkitd   20   0  610540   1096    708 S   0.0  0.0   0:05.58 /usr/lib/+
   526 root      20   0  224148   5560   1156 S   0.0  0.2   0:00.46 queueproc+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   549 root      20   0  124476    460    328 S   0.0  0.0   0:01.17 /usr/sbin+
   550 root      20   0   24208     28      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  114704     80     80 S   0.0  0.0   0:00.02 /bin/bash
   565 root      20   0  108296     84     80 S   0.0  0.0   0:00.00 /sbin/age+
   566 mailnull  20   0   89116   3888    940 S   0.0  0.2   0:00.84 /usr/sbin+
   630 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   682 root       0 -20       0      0      0 S   0.0  0.0   0:02.52 [loop0]
   691 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   703 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0  153404    340    256 S   0.0  0.0   0:00.90 pure-ftpd+
   928 root      20   0  572372    980    404 S   0.0  0.0   0:03.48 /usr/bin/+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   932 telegraf  20   0 5654048  35568   5832 S   0.0  1.5   0:21.86 /usr/loca+
   934 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   936 root      20   0   51508    540    376 S   0.0  0.0   0:00.49 /usr/sbin+
   937 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   938 root      20   0  111304    448    348 S   0.0  0.0   0:05.24 /usr/sbin+
   940 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.89 /usr/bin/+
   941 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   942 systuser  20   0  114016  14228   2284 S   0.0  0.6   0:09.69 /usr/loca+
   946 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   952 root      20   0  385496   1256    532 S   0.0  0.1   0:01.37 php-fpm: +
   971 root      20   0  436392   4200   3996 S   0.0  0.2   0:01.16 php-fpm: +
   979 root      20   0  386112    712    496 S   0.0  0.0   0:01.05 php-fpm: +
   985 root      20   0  392856    712    528 S   0.0  0.0   0:01.10 php-fpm: +
   986 root      20   0  261436   7144   1776 S   0.0  0.3   0:10.88 cpsrvd (S+
   988 root      20   0  397344   3236    672 S   0.0  0.1   0:05.96 php-fpm: +
   992 root      20   0 1763112  90872    744 S   0.0  3.8   0:14.55 /usr/loca+
   999 named     20   0  711664  38984   1632 S   0.0  1.6   0:20.94 /usr/sbin+
  1007 root      20   0  331088   8604   7296 S   0.0  0.4   0:10.74 /usr/sbin+
  1016 cpanelc+  20   0   10540   3624   2324 S   0.0  0.1   0:33.88 /usr/loca+
  1080 dovenull  20   0   47256   3520   2508 S   0.0  0.1   0:00.64 dovecot/p+
  1081 dovenull  20   0   48672   4604   2440 S   0.0  0.2   0:00.61 dovecot/i+
  1082 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.11 dovecot/a+
  1083 root      20   0   10452    444    268 S   0.0  0.0   0:00.52 dovecot/l+
  1084 dovenull  20   0   47396   3456   2304 S   0.0  0.1   0:00.95 dovecot/p+
  1085 dovenull  20   0   48740   4560   2504 S   0.0  0.2   0:00.47 dovecot/i+
  1091 root      20   0   24564   2596    456 S   0.0  0.1   0:00.25 dovecot/c+
  1092 dovecot   20   0   13568    616    404 S   0.0  0.0   0:00.10 dovecot/s+
  1154 dovecot   20   0   41172   1536   1044 S   0.0  0.1   0:00.96 dovecot/a+
  1155 wp-tool+  20   0  387528  13324   1720 S   0.0  0.6   0:00.36 /usr/bin/+
  1158 wp-tool+  20   0  410452  36980   1952 S   0.0  1.5   0:33.73 /usr/bin/+
  1175 root      20   0  248140  41172   1020 S   0.0  1.7   0:07.63 /usr/loca+
  1193 systuser  20   0  157700   2904    888 S   0.0  0.1   0:00.17 SonarPush+
  1260 root      20   0  209428  10544   2340 S   0.0  0.4   0:03.68 tailwatchd
  1266 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.26 cpdavd - +
  1267 root      20   0  167452   1328    728 S   0.0  0.1   0:00.59 dnsadmin +
  1677 root      20   0  299272    768    388 S   0.0  0.0   0:01.12 php-fpm: +
  1706 root      38  18  130416   1392    708 S   0.0  0.1   0:00.11 cpanellog+
  1994 root      20   0  267016   8468    712 S   0.0  0.3   0:02.23 /usr/sbin+
  2017 root      20   0   12832    384    264 S   0.0  0.0   0:03.05 /usr/loca+
  2018 root      20   0   12732    324    244 S   0.0  0.0   0:02.66 /usr/loca+
  2019 root      20   0   12860    388    252 S   0.0  0.0   0:02.81 /usr/loca+
  2047 root      20   0   53268    128    128 S   0.0  0.0   0:00.04 /usr/loca+
  2243 root      20   0  184688  13916   1148 S   0.0  0.6   0:38.43 lfd - sle+
  6595 root      20   0  275092 104628   2320 S   0.0  4.3   0:05.51 spamd chi+
  6596 root      20   0  261032  87792   1936 S   0.0  3.6   0:00.21 spamd chi+
 11471 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 11472 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.75 [kworker]
 34597 nobody    20   0  277732  21412   5124 S   0.0  0.9   0:04.47 /usr/sbin+
 43220 nobody    20   0  277904  21416   5096 S   0.0  0.9   0:03.26 /usr/sbin+
 43256 nobody    20   0  277620  21008   5004 S   0.0  0.9   0:02.81 /usr/sbin+
 44873 nobody    20   0  277720  21024   4900 S   0.0  0.9   0:03.08 /usr/sbin+
 46360 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 48137 nobody    20   0  277796  20964   4924 S   0.0  0.9   0:02.62 /usr/sbin+
 48821 nobody    20   0  277736  20772   4892 S   0.0  0.9   0:02.65 /usr/sbin+
 49648 nobody    20   0  277564  20872   4988 S   0.0  0.9   0:02.31 /usr/sbin+
 50657 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 53478 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 57606 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 58409 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58413 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 58985 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61738 nobody    20   0  277748  20172   4308 S   0.0  0.8   0:00.76 /usr/sbin+
 61924 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62090 nobody    20   0  277800  20160   4380 S   0.0  0.8   0:00.76 /usr/sbin+
 62130 nobody    20   0  277808  20244   4476 S   0.0  0.8   0:00.69 /usr/sbin+
 62916 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 64618 nobody    20   0  277524  19720   4304 S   0.0  0.8   0:00.38 /usr/sbin+
 65522 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65764 root      20   0 1275844  10332    600 S   0.0  0.4   0:00.05 /usr/bin/+
 65799 root      20   0 1277312  11904    600 S   0.0  0.5   0:00.06 /usr/bin/+
 66281 nobody    20   0  277924  19612   4008 S   0.0  0.8   0:00.35 /usr/sbin+
 67203 nobody    20   0  277548  19416   3996 S   0.0  0.8   0:00.24 /usr/sbin+
 67512 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67828 mailnull  20   0   89320   4368   1228 S   0.0  0.2   0:00.00 /usr/sbin+
 68092 nobody    20   0  277800  19472   3820 S   0.0  0.8   0:00.10 /usr/sbin+
 68526 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 68638 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68797 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 68878 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 69011 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 69049 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 69069 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 69090 nigeria   20   0  397188   9044   5096 S   0.0  0.4   0:00.02 php-fpm: +
 69113 workflo+  20   0  521540  59324   5972 S   0.0  2.5   0:00.22 php-fpm: +
 69115 workflo+  20   0  519208  56424   4380 S   0.0  2.3   0:00.20 php-fpm: +
 69124 nobody    20   0  277360  18096   3088 S   0.0  0.7   0:00.00 /usr/sbin+
 69133 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 69138 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 69140 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69141 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69142 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69143 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69144 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69145 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69146 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69147 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69149 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69150 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69151 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69152 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 69154 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69157 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 69158 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69159 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69160 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 69161 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69162 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69163 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 69165 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 69166 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69167 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 69168 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69172 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69173 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69174 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69176 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 69180 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 69182 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69183 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 69184 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69217 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 69224 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69225 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:44   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:44   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:44   0:43  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:44   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:44   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [deferwq]
root        110  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [kworker/1:1H]
root        251  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_0]
root        252  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_1]
root        253  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ttm_swap]
root        265  0.0  0.0      0     0 ?        S<   09:44   0:01  \_ [kworker/0:1H]
root        279  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [xprtiod]
root        630  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kvm-irqfd-clean]
root        682  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [loop0]
root        691  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [jbd2/loop0-8]
root        703  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root      46360  0.0  0.0      0     0 ?        S    20:22   0:00  \_ [kworker/0:3]
root      50657  0.0  0.0      0     0 ?        S    20:31   0:00  \_ [kworker/1:5]
root      53478  0.0  0.0      0     0 ?        S    20:37   0:00  \_ [kworker/0:4]
root      57606  0.0  0.0      0     0 ?        S    20:45   0:00  \_ [kworker/u200:0]
root      58409  0.0  0.0      0     0 ?        S    20:47   0:00  \_ [kworker/1:1]
root      58413  0.0  0.0      0     0 ?        S    20:47   0:00  \_ [kworker/0:1]
root      58985  0.0  0.0      0     0 ?        S    20:48   0:00  \_ [kworker/1:2]
root      61924  0.0  0.0      0     0 ?        S    20:54   0:00  \_ [kworker/1:0]
root      62916  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/0:0]
root      65522  0.0  0.0      0     0 ?        S    21:00   0:00  \_ [kworker/u200:1]
root      67512  0.0  0.0      0     0 ?        S    21:03   0:00  \_ [kworker/1:3]
root      68638  0.0  0.0      0     0 ?        S    21:05   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44392  3668 ?        Ss   09:44   0:59 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.3  40240  7860 ?        Ss   09:44   0:21 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   152 ?        Ss   09:44   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   500 ?        S<sl 09:44   0:03 /sbin/auditd
root        478  0.0  0.0  52852   436 ?        Ss   09:44   0:00 /usr/sbin/smartd -n -q never
root        479  0.0  0.0  21540   384 ?        Ss   09:44   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0  24692  1204 ?        Ss   09:44   0:09 /usr/lib/systemd/systemd-logind
root        491  0.0  0.0 152780   160 ?        Ss   09:44   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        492  0.0  0.0  58724  1480 ?        Ss   09:44   0:21 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        496  0.0  0.0 1197256 1732 ?        Ssl  09:44   0:19 /usr/sbin/nscd
rpc         501  0.0  0.0  69256   168 ?        Ss   09:44   0:00 /sbin/rpcbind -w
root        516  0.0  0.0   4388    84 ?        Ss   09:44   0:00 /usr/sbin/acpid
polkitd     518  0.0  0.0 610540  1096 ?        Ssl  09:44   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        526  0.0  0.2 224148  5560 ?        Ss   09:44   0:00 queueprocd - waiting up to 60s to process a task
root        530  0.0  0.0 195208     0 ?        Ssl  09:44   0:00 /usr/sbin/gssproxy -D
root        549  0.0  0.0 124476   460 ?        Ss   09:44   0:01 /usr/sbin/crond -n
root      69140  0.0  0.0 183044  2148 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69163  0.0  0.0 113284  1212 ?        Ss   21:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      69176  0.0  0.0 108052   360 ?        S    21:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      69180  0.0  0.0 113288  1516 ?        S    21:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      69228  0.0  0.0 153840  2092 ?        R    21:06   0:00  |               \_ ps auxf
root      69141  0.0  0.0 183044  2152 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69173  0.0  0.0  20164   804 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      69142  0.0  0.0 183044  2152 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69159  0.0  0.0  20164   804 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      69143  0.0  0.0 183044  2152 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69172  0.0  0.0  20164   804 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      69144  0.0  0.0 183044  2152 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69161  0.0  0.0  20164   804 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      69145  0.0  0.0 183044  2152 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69174  0.0  0.0  20164   804 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      69146  0.0  0.0 183044  2152 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69167  0.0  0.0  20164   992 ?        Ss   21:06   0:00  |   \_ jailshell (cloudsms) [69224] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  69224  0.0  0.0  20164   260 ?        S    21:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  69225  0.0  0.0 113284  1212 ?        S    21:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  69226  0.0  0.0   9216   196 ?        R    21:06   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      69147  0.0  0.0 183044  2148 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69158  0.0  0.0  20164   808 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      69149  0.0  0.0 183044  2144 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69168  0.0  0.0  20164   808 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      69150  0.0  0.0 183044  2144 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69162  0.0  0.0  20164   804 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      69151  0.0  0.0 183044  2144 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69166  0.0  0.0  20164   804 ?        Ss   21:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      69152  0.0  0.0 183044  2148 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69165  0.0  0.0  20164   968 ?        Ss   21:06   0:00  |   \_ jailshell (pactpay) [69182] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69182  0.0  0.0  20164   260 ?        S    21:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69183  0.0  0.7 476724 17480 ?        S    21:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      69154  0.0  0.0 183044  2144 ?        S    21:06   0:00  \_ /usr/sbin/CROND -n
root      69160  0.0  0.0  20164   972 ?        Ss   21:06   0:00      \_ jailshell (nigeria) [69184] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69184  0.0  0.0  20164   260 ?        S    21:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69186  0.0  0.6 400652 15940 ?        S    21:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        550  0.0  0.0  24208    28 ?        Ss   09:44   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 114704    80 ttyS0    Ss+  09:44   0:00 /bin/bash
root        565  0.0  0.0 108296    84 tty1     Ss+  09:44   0:00 /sbin/agetty --noclear tty1 linux
mailnull    566  0.0  0.1  89116  3888 ?        Ss   09:44   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  67828  0.0  0.1  89320  4368 ?        S    21:03   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0 153404   340 ?        Ss   09:44   0:00 pure-ftpd (SERVER)
root        928  0.0  0.0 572372   980 ?        Ssl  09:44   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    930  0.0  0.0  10132    48 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    932  0.0  1.4 5654048 35568 ?       SLsl 09:44   0:21 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    934  0.0  0.0  11348    40 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        936  0.0  0.0  51508   540 ?        Ss   09:44   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47256  3520 ?        S    09:44   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48672  4604 ?        S    09:44   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   420 ?        S    09:44   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   444 ?        S    09:44   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47396  3456 ?        S    09:44   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  48740  4560 ?        S    09:44   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24564  2596 ?        S    09:44   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   616 ?        S    09:44   0:00  \_ dovecot/stats
dovecot    1154  0.0  0.0  41172  1536 ?        S    09:44   0:00  \_ dovecot/auth
root      68526  0.0  0.1  41052  2728 ?        S    21:05   0:00  \_ dovecot/auth -w
systuser    937  0.0  0.0 113932    72 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 111304   448 ?        Ss   09:44   0:05 /usr/sbin/sshd -D
root      68797  0.0  0.1 111304  4276 ?        Ss   21:05   0:00  \_ sshd: [accepted]
root      68878  0.0  0.1 111304  4268 ?        Ss   21:05   0:00  \_ sshd: [accepted]
root      69011  0.0  0.1 111304  4276 ?        Ss   21:05   0:00  \_ sshd: [accepted]
root      69049  0.0  0.1 111304  4272 ?        Ss   21:05   0:00  \_ sshd: [accepted]
root      69069  0.0  0.1 111304  4272 ?        Ss   21:05   0:00  \_ sshd: [accepted]
root      69132  1.0  0.2 162436  5832 ?        Ss   21:05   0:00  \_ sshd: root [priv]
sshd      69133  0.0  0.1 115644  2628 ?        S    21:05   0:00  |   \_ sshd: root [net]
root      69157  0.0  0.1 111304  4268 ?        Ss   21:06   0:00  \_ sshd: [accepted]
root      69227  0.0  0.0 111304  1016 ?        R    21:06   0:00      \_ sshd: [accepted]
memcach+    940  0.0  0.0 342400     0 ?        Ssl  09:44   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        941  0.0  0.0 445028     0 ?        Ss   09:44   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    942  0.0  0.5 114016 14228 ?        Ssl  09:44   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    946  0.0  0.0 111864    76 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        952  0.0  0.0 385496  1256 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        971  0.0  0.1 436392  4200 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        979  0.0  0.0 386112   712 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        985  0.0  0.0 392856   712 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        986  0.0  0.2 261436  7144 ?        Ss   09:44   0:10 cpsrvd (SSL) - waiting for connections                   
root      69138  0.0  0.0      0     0 ?        Z    21:06   0:00  \_ [cpaneld - servi] <defunct>
root        988  0.0  0.1 397344  3236 ?        Ss   09:44   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   69090  0.2  0.3 397188  9044 ?        S    21:05   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  69113  4.4  2.4 521540 59324 ?        S    21:05   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  69115  5.0  2.3 519208 56424 ?        S    21:05   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root        992  0.0  3.7 1763112 90872 ?       Ssl  09:44   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       999  0.0  1.6 711664 38984 ?        Ssl  09:44   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1007  0.0  0.3 331088  8604 ?        Ssl  09:44   0:10 /usr/sbin/rsyslogd -n
cpanelc+   1016  0.0  0.1  10540  3624 ?        Rs   09:44   0:33 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
wp-tool+   1155  0.0  0.5 387528 13324 ?        Ss   09:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1158  0.0  1.5 410452 36980 ?        Ss   09:44   0:33 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1175  0.0  1.7 248140 41172 ?        Ss   09:44   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6595  0.0  4.3 275092 104628 ?       S    09:51   0:05  \_ spamd child
root       6596  0.0  3.6 261032 87792 ?        S    09:51   0:00  \_ spamd child
systuser   1193  0.0  0.1 157700  2904 ?        S    09:44   0:00 SonarPush 0.6.12 [sleeping]
root       1260  0.0  0.4 209428 10544 ?        Ss   09:44   0:03 tailwatchd
root       1266  0.0  0.2 183900  6692 ?        Ss   09:44   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1267  0.0  0.0 167452  1328 ?        Ss   09:44   0:00 dnsadmin - dormant mode
root       1677  0.0  0.0 299272   768 ?        Ss   09:44   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1706  0.0  0.0 130416  1392 ?        SN   09:44   0:00 cpanellogd - sleeping for logs
mysql      1750  1.3 11.9 1478216 289552 ?      Sl   09:44   9:28 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1994  0.0  0.3 267016  8468 ?        Ss   09:45   0:02 /usr/sbin/httpd -k start
root       2017  0.0  0.0  12832   384 ?        S    09:45   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2018  0.0  0.0  12732   324 ?        S    09:45   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2019  0.0  0.0  12860   388 ?        S    09:45   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2047  0.0  0.0  53268   128 ?        S    09:45   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    34597  0.1  0.8 277732 21412 ?        S    19:58   0:04  \_ /usr/sbin/httpd -k start
nobody    43220  0.1  0.8 277904 21416 ?        S    20:15   0:03  \_ /usr/sbin/httpd -k start
nobody    43256  0.0  0.8 277620 21008 ?        S    20:15   0:02  \_ /usr/sbin/httpd -k start
nobody    44873  0.1  0.8 277720 21024 ?        S    20:19   0:03  \_ /usr/sbin/httpd -k start
nobody    48137  0.1  0.8 277796 20964 ?        S    20:25   0:02  \_ /usr/sbin/httpd -k start
nobody    48821  0.1  0.8 277736 20772 ?        S    20:27   0:02  \_ /usr/sbin/httpd -k start
nobody    49648  0.1  0.8 277564 20872 ?        S    20:29   0:02  \_ /usr/sbin/httpd -k start
nobody    61738  0.1  0.8 277748 20172 ?        S    20:53   0:00  \_ /usr/sbin/httpd -k start
nobody    62090  0.1  0.8 277800 20160 ?        S    20:54   0:00  \_ /usr/sbin/httpd -k start
nobody    62130  0.0  0.8 277808 20244 ?        S    20:54   0:00  \_ /usr/sbin/httpd -k start
nobody    64618  0.0  0.8 277524 19720 ?        S    20:59   0:00  \_ /usr/sbin/httpd -k start
nobody    66281  0.1  0.8 277924 19612 ?        S    21:01   0:00  \_ /usr/sbin/httpd -k start
nobody    67203  0.1  0.8 277548 19416 ?        S    21:02   0:00  \_ /usr/sbin/httpd -k start
nobody    68092  0.0  0.8 277800 19472 ?        S    21:04   0:00  \_ /usr/sbin/httpd -k start
nobody    69124  0.0  0.7 277360 18096 ?        S    21:05   0:00  \_ /usr/sbin/httpd -k start
root       2243  0.0  0.5 184688 13916 ?        Ss   09:45   0:38 lfd - sleeping
oysipao+  11471  0.0  0.0   3148   416 ?        Ss   10:00   0:00 [kworker]
oysipao+  11472  0.0  0.0   3152   492 ?        S    10:00   0:00  \_ [kworker]
root      65764  0.0  0.4 1275844 10332 ?       Ssl  21:00   0:00 /usr/bin/cspdaemon
root      65799  0.0  0.4 1277312 11904 ?       Ssl  21:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 40865  Threads: 6  Questions: 3197730  Slow queries: 0  Opens: 12430  Flush tables: 1  Open tables: 2000  Queries per second avg: 78.251
*************************** 1. row ***************************
     Id: 46119
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 4
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 46120
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 4
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 46131
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 46132
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 5. row ***************************
     Id: 46138
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 46140
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.149.43 TIME_WAIT
      1 142.44.233.12 TIME_WAIT
      1 147.136.68.43 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.93.184.168 TIME_WAIT
      1 205.234.147.23 TIME_WAIT
      1 45.145.213.19 TIME_WAIT
      1 47.128.111.151 TIME_WAIT
      1 47.128.121.140 TIME_WAIT
      1 47.128.122.136 TIME_WAIT
      1 47.128.16.109 TIME_WAIT
      1 47.128.16.137 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 21:06:01 WAT
   Restart Time: Monday, 10-Nov-2025 09:45:02 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 20 minutes 59 seconds
   Server load: 0.13 0.19 0.18
   Total accesses: 129548 - Total Traffic: 2.9 GB - Total Duration: 59581245
   CPU Usage: u18.04 s8.67 cu1574.26 cs1170.97 - 6.78% CPU load
   3.17 requests/sec - 75.0 kB/second - 23.7 kB/request - 459.916 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KK_KKKWWKWKKW.....KR............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn Child  Slot      Client     Protocol              VHost                                          Request
   0-0  48821 1/504/7973 K 11.60 3     0   3560627 5.6  12.08 188.85 87.250.224.16  http/1.1 nigeriadecide.org:443           GET /robots.txt HTTP/1.1
   1-0  64618 2/69/8214  K 1.55  1     259 3698215 65.5 1.60  185.00 66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=45011928 HTTP/1.1
   2-0  49648 0/420/7733 _ 10.49 0     0   3509694 0.0  12.60 184.19 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  62090 1/142/7834 K 3.23  0     417 3454889 18.8 3.32  171.80 47.128.121.105 http/1.1 nigeriadecide.org:443           GET /final_candidates_cleared_for_elections.php?candidate=MTI=&
   4-0  66281 6/67/7950  K 1.50  0     72  3699787 44.3 1.37  180.58 51.68.32.135   http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   5-0  44873 1/545/7178 K 13.58 4     268 3288437 35.4 13.28 176.05 66.249.70.36   http/1.1 support.cloudware.ng:443        GET /?c=3724461745 HTTP/1.1
   6-0  67203 0/40/7451  W 1.05  0     0   3432091 0.0  1.02  177.73 66.249.70.34   http/1.1 support.cloudware.ng:443        GET /?c=3660560427 HTTP/1.1
   7-0  62130 0/127/6978 W 3.19  0     0   3140516 0.0  3.12  155.94 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   8-0  34597 2/895/7046 K 20.93 2     282 3627832 66.4 18.77 162.29 66.249.70.37   http/1.1 support.cloudware.ng:443        GET /?c=209352446 HTTP/1.1
   9-0  61738 0/214/6600 W 3.62  5     0   2752351 0.0  2.99  150.38 54.39.210.140  http/1.1 blog.workflow-management-softwa GET /tag/tricks/ HTTP/1.1
   10-0 68092 3/20/6411  K 0.32  0     300 2831991 93.4 0.38  146.78 66.249.70.38   http/1.1 support.cloudware.ng:443        GET /?c=2983684368 HTTP/1.1
   11-0 69124 1/1/5596   K 0.00  3     4   2579503 9.7  0.01  127.53 95.108.213.80  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Ondo&lga=Ifedore HTTP/1.1
   12-0 48137 0/555/5539 W 11.89 4     0   2391410 0.0  11.62 128.44 96.30.57.23    http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1762805156.95080208778381347656
   13-0 -     0/0/5483   . 0.00  101   0   2511830 0.0  0.00  125.19 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 -     0/0/4134   . 0.00  2916  0   1916153 0.0  0.00  100.42 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -     0/0/4184   . 0.00  717   0   1850698 0.0  0.00  93.27  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 -     0/0/4009   . 0.00  2984  0   1847607 0.0  0.00  89.29  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/2066   . 0.00  3016  0   1015280 0.0  0.00  54.86  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 43220 1/642/4219 K 15.12 1     257 2078714 35.3 14.54 106.68 66.249.70.32   http/1.1 support.cloudware.ng:443        GET /?c=3145855606 HTTP/1.1
   19-0 43256 0/523/2086 R 12.54 45    10  1042167 0.0  11.88 45.66  47.128.121.140 http/1.1
   20-0 -     0/0/1560   . 0.00  4291  0   691981  0.0  0.00  34.66  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/627    . 0.00  4966  0   350710  0.0  0.00  13.72  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/1252   . 0.00  4560  0   573638  0.0  0.00  34.39  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/726    . 0.00  4968  0   316473  0.0  0.00  12.76  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/343    . 0.00  4972  0   214774  0.0  0.00  6.89   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/1056   . 0.00  4973  0   407697  0.0  0.00  22.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/1557   . 0.00  3998  0   638586  0.0  0.00  29.92  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/906    . 0.00  2961  0   505208  0.0  0.00  21.20  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/197    . 0.00  21747 0   103642  0.0  0.00  5.34   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/5      . 0.00  22651 0   7828    0.0  0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/6      . 0.00  22653 0   3214    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/9      . 0.00  22655 0   9074    0.0  0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/5      . 0.00  22669 0   12312   0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00  22668 0   11260   0.0  0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/198    . 0.00  21715 0   107367  0.0  0.00  4.83   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/4      . 0.00  22667 0   11424   0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/7      . 0.00  22675 0   7452    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00  22670 0   9120    0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/761    . 0.00  18797 0   375432  0.0  0.00  22.14  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/5      . 0.00  22647 0   9470    0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/61     . 0.00  22665 0   36919   0.0  0.00  1.62   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/111    . 0.00  22663 0   54684   0.0  0.00  2.46   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/211    . 0.00  21660 0   108349  0.0  0.00  5.24   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/4      . 0.00  22666 0   9746    0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/491    . 0.00  22596 0   281109  0.0  0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/7      . 0.00  38478 0   14062   0.0  0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/3      . 0.00  38501 0   11309   0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/131    . 0.00  37610 0   184067  0.0  0.00  2.95   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00  38488 0   12719   0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/1      . 0.00  38537 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/1      . 0.00  38530 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/1      . 0.00  38535 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/3      . 0.00  38498 0   33      0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/4      . 0.00  38496 4   4250    0.0  0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/1      . 0.00  38532 0   1       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/3      . 0.00  38511 0   1257    0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/3      . 0.00  38500 0   962     0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00  38516 0   10772   0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/2      . 0.00  38510 0   615     0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/1      . 0.00  38540 3   4       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00  38536 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/52     . 0.00  38271 0   37149   0.0  0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  38512 0   18      0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00  38489 0   1118    0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00  38538 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00  38485 0   1359    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  38533 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  38526 0   1939    0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/6      . 0.00  38479 0   3137    0.0  0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00  38517 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/6      . 0.00  38494 0   4135    0.0  0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00  38531 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/2      . 0.00  38514 0   12402   0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/5      . 0.00  38476 0   693     0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00  38539 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  38534 0   0       0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/8      . 0.00  38475 0   1269    0.0  0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/441    . 0.00  36799 0   158222  0.0  0.00  9.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/44     . 0.00  38272 0   32451   0.0  0.00  0.96   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 653
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...75)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 94595
   total entries replaced since starting: 0
   total entries expired since starting: 93893
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 64 hit, 331 miss
   total removes since starting: 50 hit, 197 miss
Youez - 2016 - github.com/yon3zu
LinuXploit