403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.03.24.txt
 ## swap threshold exceeded
## server overview
2025-11-18.03.24 load[0] mem[58/79] mysql[5/11] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1276          81          80        1006         821
Swap:          1999        1709         290
 03:24:01 up  8:36,  0 users,  load average: 0.25, 0.45, 0.56
## system overview
top - 03:24:01 up  8:36,  0 users,  load average: 0.25, 0.45, 0.56
Tasks: 202 total,   7 running, 195 sleeping,   0 stopped,   0 zombie
%Cpu(s): 63.6 us, 33.3 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   114136 free,  1295396 used,  1010768 buff/cache
KiB Swap:  2047996 total,   297000 free,  1750996 used.   852604 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 263080   3228 S  52.9 10.9   7:14.43 /usr/sbin+
     1 root      20   0   44412   3368   1512 S  11.8  0.1   0:43.05 /usr/lib/+
 62803 nigeria   20   0  404052  16140  10384 R  11.8  0.7   0:00.03 /opt/cpan+
 62809 pactpay   20   0  480124  17312  11580 R  11.8  0.7   0:00.02 /opt/cpan+
 62676 workflo+  20   0  517144  51380   4900 S   5.9  2.1   0:00.71 php-fpm: +
 62826 cloudsms  20   0  399792  11488   8036 R   5.9  0.5   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.80 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.30 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:31.58 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.18 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.24 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.82 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.16 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.80 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40244   5020   4768 S   0.0  0.2   0:14.85 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    544    416 S   0.0  0.0   0:02.09 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    908    504 S   0.0  0.0   0:04.24 /usr/lib/+
   514 root      20   0  224148   3328   1024 S   0.0  0.1   0:00.36 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.70 /usr/sbin+
   521 root      20   0  152780    204    164 S   0.0  0.0   0:00.02 /usr/sbin+
   522 root      20   0   52852    312    204 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1392    668 S   0.0  0.1   0:16.57 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   24624   1212    864 S   0.0  0.1   0:07.29 /usr/lib/+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:01.01 /usr/sbin+
   558 root      20   0   25908    144    124 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1784    736 S   0.0  0.1   0:25.11 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4072    984 S   0.0  0.2   0:00.69 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:03.23 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.02 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.67 pure-ftpd+
  1062 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13136   2536 S   0.0  0.5   0:07.32 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.69 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:27.05 /usr/bin/+
  1069 telegraf  20   0 5654304  37100   6088 S   0.0  1.5   0:16.65 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.68 /usr/bin/+
  1072 root      20   0   51508    572    408 S   0.0  0.0   0:00.37 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.15 /usr/bin/+
  1085 systuser  20   0   12756     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.80 /usr/sbin+
  1087 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1388   1276 S   0.0  0.1   0:01.30 sw-engine+
  1091 root      20   0  389508    572    476 S   0.0  0.0   0:00.88 php-fpm: +
  1098 named     20   0 1054792  43584   1856 S   0.0  1.8   0:17.49 /usr/sbin+
  1109 root      20   0  388892    608    396 S   0.0  0.0   0:00.80 php-fpm: +
  1113 root      20   0  298320   5704   4676 S   0.0  0.2   0:07.51 /usr/sbin+
  1117 root      20   0 1763304  77788    912 S   0.0  3.2   0:14.06 /usr/loca+
  1123 root      20   0  439788    872    780 S   0.0  0.0   0:00.90 php-fpm: +
  1131 root      20   0  400740   2008    724 S   0.0  0.1   0:04.48 php-fpm: +
  1134 root      20   0  261284   6828   1812 S   0.0  0.3   0:03.38 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3728   2364 R   0.0  0.2   0:24.73 /usr/loca+
  1149 root      20   0  396248    688    504 S   0.0  0.0   0:00.83 php-fpm: +
  1213 dovenull  20   0   46984   2304   1584 S   0.0  0.1   0:00.50 dovecot/p+
  1214 dovenull  20   0   47936   2996   1724 S   0.0  0.1   0:00.35 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.09 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.38 dovecot/l+
  1217 dovenull  20   0   47056   2524   1712 S   0.0  0.1   0:00.69 dovecot/p+
  1218 dovenull  20   0   47752   2716   1632 S   0.0  0.1   0:00.25 dovecot/i+
  1226 root      20   0   24528   2392    564 S   0.0  0.1   0:00.19 dovecot/c+
  1227 dovecot   20   0   13568    712    516 S   0.0  0.0   0:00.07 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.13 SonarPush+
  1297 dovecot   20   0   41188   1524   1072 S   0.0  0.1   0:00.69 dovecot/a+
  1300 wp-tool+  20   0  412396  26532   2124 S   0.0  1.1   0:09.92 /usr/bin/+
  1301 wp-tool+  20   0  387556   3752   1788 S   0.0  0.2   0:00.31 /usr/bin/+
  1308 root      20   0  248116   4768    892 S   0.0  0.2   0:06.50 /usr/loca+
  1409 root      20   0  210332  10708   2104 S   0.0  0.4   0:04.14 tailwatchd
  1412 root      20   0  262224  24500   6768 S   0.0  1.0   0:01.59 cpdavd - +
  1413 root      20   0  167452   3480   2104 S   0.0  0.1   0:00.54 dnsadmin +
  1836 root      20   0  299272    572    408 S   0.0  0.0   0:00.84 php-fpm: +
  1853 root      38  18  130416   1428    756 S   0.0  0.1   0:00.07 cpanellog+
  2063 root      20   0  266984   7676    724 S   0.0  0.3   0:04.12 /usr/sbin+
  2067 root      20   0   12864    388    280 S   0.0  0.0   0:03.34 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:02.90 /usr/loca+
  2069 root      20   0   12916    400    280 S   0.0  0.0   0:03.12 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  266560  97744   3108 S   0.0  4.0   0:04.90 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
 13053 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.57 [kworker]
 14140 root      20   0  182160  29104   1240 S   0.0  1.2   0:12.20 lfd - sle+
 24663 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 37624 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 41684 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 44510 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46733 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 47549 root      20   0  123364    748    524 S   0.0  0.0   0:00.00 /usr/sbin+
 50495 nobody    20   0  277812  20900   5124 S   0.0  0.9   0:01.67 /usr/sbin+
 51053 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 51281 nobody    20   0  277680  19712   4720 S   0.0  0.8   0:01.43 /usr/sbin+
 53665 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 55024 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56727 nobody    20   0  277544  19348   4480 S   0.0  0.8   0:00.84 /usr/sbin+
 57707 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59016 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 59076 nobody    20   0  277680  19348   4348 S   0.0  0.8   0:00.47 /usr/sbin+
 59738 nobody    20   0  277884  18900   4092 S   0.0  0.8   0:00.32 /usr/sbin+
 59802 nobody    20   0  277744  19204   4344 S   0.0  0.8   0:00.42 /usr/sbin+
 59813 nobody    20   0  277744  19380   4252 S   0.0  0.8   0:00.47 /usr/sbin+
 60016 nobody    20   0  277744  19116   4300 S   0.0  0.8   0:00.42 /usr/sbin+
 60407 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60431 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61326 nobody    20   0  277876  18712   3948 S   0.0  0.8   0:00.24 /usr/sbin+
 61355 nobody    20   0  277676  18744   3988 S   0.0  0.8   0:00.18 /usr/sbin+
 61418 nobody    20   0  277464  18508   3972 S   0.0  0.8   0:00.28 /usr/sbin+
 61427 nobody    20   0  277472  18548   3996 S   0.0  0.8   0:00.23 /usr/sbin+
 62023 nobody    20   0  277476  18328   3828 S   0.0  0.8   0:00.10 /usr/sbin+
 62248 nobody    20   0  277768  18564   3800 S   0.0  0.8   0:00.10 /usr/sbin+
 62539 root      20   0  261284   7732   1408 S   0.0  0.3   0:00.00 webmaild +
 62565 nigeria   20   0  419804  26400   4000 S   0.0  1.1   0:00.38 php-fpm: +
 62631 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 62670 workflo+  20   0  511596  48136   6716 S   0.0  2.0   0:00.51 php-fpm: +
 62671 workflo+  20   0  524940  59336   6076 S   0.0  2.5   0:00.23 php-fpm: +
 62683 workflo+  20   0  497704  30988   4744 S   0.0  1.3   0:00.22 php-fpm: +
 62702 workflo+  20   0  524656  57304   4548 S   0.0  2.4   0:00.22 php-fpm: +
 62718 nobody    20   0  277744  17812   3160 S   0.0  0.7   0:00.01 /usr/sbin+
 62727 nobody    20   0  277316  17012   2796 S   0.0  0.7   0:00.00 /usr/sbin+
 62728 nobody    20   0  277600  17584   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 62732 root      20   0  261284   7744   1492 S   0.0  0.3   0:00.00 cpsrvd (S+
 62735 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 62736 root      20   0  182868   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62737 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62738 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62739 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62741 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62742 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62744 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62745 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62746 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62747 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62749 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 62751 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 62752 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 62753 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 62772 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 62773 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 62777 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 62778 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62779 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62780 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 62781 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62783 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 62784 root      20   0   20164    960    760 S   0.0  0.0   0:00.00 jailshell+
 62785 root      20   0   20164    964    760 S   0.0  0.0   0:00.00 jailshell+
 62787 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 62799 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 62801 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 62812 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 62818 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 62819 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
 62820 cloudsms  20   0  404052  15612  10164 R   0.0  0.6   0:00.00 /opt/cpan+
 62822 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 62824 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 62825 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 62827 cloudsms  20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:03  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      24663  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:0]
root      37624  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/u200:2]
root      41684  0.0  0.0      0     0 ?        S    02:53   0:00  \_ [kworker/1:5]
root      44510  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/u200:0]
root      46733  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/0:1]
root      51053  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/1:2]
root      53665  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:3]
root      55024  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:2]
root      57707  0.0  0.0      0     0 ?        S    03:16   0:00  \_ [kworker/1:0]
root      59016  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:3]
root      60407  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/0:4]
root      60431  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44412  3368 ?        Ss   Nov17   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.2  40244  5020 ?        Ss   Nov17   0:14 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   544 ?        S<sl Nov17   0:02 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3328 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   204 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   312 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1392 ?        Ss   Nov17   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1212 ?        Ss   Nov17   0:07 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:01 /usr/sbin/crond -n
root      62735  0.0  0.0 182864  2408 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62751  0.0  0.0 113284  1212 ?        Ss   03:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      62752  0.0  0.0 108052   356 ?        S    03:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      62753  0.0  0.0 113288  1520 ?        S    03:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      62828  0.0  0.0 153840  2096 ?        R    03:24   0:00  |               \_ ps auxf
root      62736  0.0  0.0 182868  2408 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62781  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      62737  0.0  0.0 182864  2412 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62778  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      62738  0.0  0.0 182864  2412 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62779  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      62739  0.0  0.0 182864  2412 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62772  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      62741  0.0  0.0 182864  2412 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62773  0.0  0.0  20164   984 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [62818] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  62818  0.0  0.0  20164   260 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  62819  0.0  0.0 113284  1208 ?        S    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  62820  0.0  0.6 404052 15612 ?        S    03:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      62742  0.0  0.0 182864  2412 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62787  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      62744  0.0  0.0 182864  2412 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62777  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      62745  0.0  0.0 182864  2412 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62783  0.0  0.0  20164   988 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [62824] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  62824  0.0  0.0  20164   264 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  62825  0.0  0.0 113284  1212 ?        S    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  62826  0.0  0.6 404052 15876 ?        S    03:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue3.php
root      62746  0.0  0.0 182864  2408 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62780  0.0  0.0  20164   988 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [62822] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  62822  0.0  0.0  20164   264 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  62827  0.0  0.0  20164   264 ?        R    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      62747  0.0  0.0 182864  2408 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62785  0.0  0.0  20164   964 ?        Ss   03:24   0:00  |   \_ jailshell (pactpay) [62801] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   62801  0.0  0.0  20164   264 ?        S    03:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   62809  0.0  0.7 480124 17312 ?        S    03:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      62749  0.0  0.0 182864  2408 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      62784  0.0  0.0  20164   960 ?        Ss   03:24   0:00      \_ jailshell (nigeria) [62799] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   62799  0.0  0.0  20164   260 ?        S    03:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   62803  0.0  0.6 404052 16140 ?        R    03:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908   144 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1784 ?        Ssl  Nov17   0:25 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4072 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    68 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    40 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13136 ?        Ssl  Nov17   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.0  0.3 1276356 8572 ?        Ssl  Nov17   0:27 /usr/bin/cspdaemon
telegraf   1069  0.0  1.5 5654304 37100 ?       SLsl Nov17   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   572 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  2304 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  2996 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.1  47056  2524 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  2716 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2392 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   712 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1524 ?        S    Nov17   0:00  \_ dovecot/auth
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
systuser   1087  0.0  0.0 111864    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1388 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  62631  0.0  0.0 445028   320 ?        S    03:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   572 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.8 1054792 43584 ?       Ssl  Nov17   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   608 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.2 298320  5704 ?        Ssl  Nov17   0:07 /usr/sbin/rsyslogd -n
root       1117  0.0  3.2 1763304 77788 ?       Ssl  Nov17   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788   872 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2008 ?        Ss   Nov17   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   62565  1.6  1.0 419804 26400 ?        S    03:23   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  62670  8.5  1.9 511596 48136 ?        S    03:23   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  62671  3.8  2.4 524940 59336 ?        S    03:23   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  62676 11.8  2.1 517144 51380 ?        S    03:23   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  62683  3.6  1.2 497704 30988 ?        S    03:23   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  62702  5.5  2.3 524656 57304 ?        S    03:23   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root       1134  0.0  0.2 261284  6828 ?        Ss   Nov17   0:03 cpsrvd (SSL) - waiting for connections                   
root      62539  0.0  0.3 261284  7732 ?        S    03:23   0:00  \_ webmaild - serving 162.142.125.113
root      62732  0.0  0.3 261284  7744 ?        S    03:24   0:00  \_ cpsrvd (SSL) - waiting for connections                   
cpanelc+   1139  0.0  0.1  10608  3728 ?        Rs   Nov17   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   688 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.0 412396 26532 ?        Ss   Nov17   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.1 387556  3752 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4768 ?        Ss   Nov17   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  4.0 266560 97744 ?        S    Nov17   0:04  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210332 10708 ?        Ss   Nov17   0:04 tailwatchd
root       1412  0.0  1.0 262224 24500 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  3480 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   572 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1428 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.4 10.8 1458600 263080 ?      Sl   Nov17   7:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7676 ?        Ss   Nov17   0:04 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12864   388 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12916   400 ?        S    Nov17   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    50495  0.1  0.8 277812 20900 ?        S    03:05   0:01  \_ /usr/sbin/httpd -k start
nobody    51281  0.1  0.8 277680 19712 ?        S    03:06   0:01  \_ /usr/sbin/httpd -k start
nobody    56727  0.1  0.7 277544 19348 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
nobody    59076  0.1  0.7 277680 19348 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    59738  0.1  0.7 277884 18900 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    59802  0.1  0.7 277744 19204 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    59813  0.1  0.8 277744 19380 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    60016  0.1  0.7 277744 19116 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    61326  0.1  0.7 277876 18712 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    61355  0.1  0.7 277676 18744 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    61418  0.1  0.7 277464 18508 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    61427  0.1  0.7 277472 18548 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    62023  0.1  0.7 277476 18328 ?        S    03:22   0:00  \_ /usr/sbin/httpd -k start
nobody    62248  0.1  0.7 277768 18564 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    62718  0.5  0.7 277744 17812 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    62727  0.0  0.7 277316 17012 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    62728  0.0  0.7 277600 17584 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148     8 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152    40 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.0  1.2 182160 29104 ?        Ss   00:00   0:12 lfd - sleeping
root      47549  0.0  0.0 123364   748 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 30955  Threads: 7  Questions: 2703251  Slow queries: 0  Opens: 9514  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.328
*************************** 1. row ***************************
     Id: 40933
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 5
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 40937
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 4
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 40951
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 40953
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-18' LIMIT 1
*************************** 5. row ***************************
     Id: 40960
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.220.159 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 44.195.50.71 TIME_WAIT
      1 51.161.37.206 TIME_WAIT
      1 54.39.6.202 TIME_WAIT
      1 66.249.69.101 TIME_WAIT
      1 68.221.67.167 TIME_WAIT
      1 98.80.130.239 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 94.102.49.155 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 03:24:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 35 minutes 49 seconds
   Server load: 0.25 0.45 0.56
   Total accesses: 152046 - Total Traffic: 3.7 GB - Total Duration: 75990356
   CPU Usage: u5.4 s5.9 cu1967.96 cs1546.83 - 11.4% CPU load
   4.91 requests/sec - 123.7 kB/second - 25.2 kB/request - 499.785 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

WKKK__KWKKK_K_KR.....R..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req    Dur   Conn  Child  Slot      Client     Protocol              VHost                                          Request
   0-0  56727 0/137/6989 W 3.55 6    0    3806796 0.0   3.59  162.62 80.82.77.202   http/1.1 blog.workflow-management-softwa GET / HTTP/1.1
   1-0  60016 1/72/7258  K 2.05 1    252  3481540 33.5  2.80  171.38 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=426635718 HTTP/1.1
   2-0  62023 1/18/6899  K 0.35 4    253  3307635 33.8  0.42  161.18 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=3569681693 HTTP/1.1
   3-0  61326 5/40/6471  K 0.97 2    277  3278238 156.6 3.55  158.69 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=2877540176 HTTP/1.1
   4-0  62248 0/19/6919  _ 0.40 0    5292 3311208 0.0   0.43  161.28 96.30.57.23    http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763432635.78729391098022460937
   5-0  61355 0/34/6671  _ 0.71 0    3873 3249902 0.0   0.99  165.67 80.82.77.202   http/1.1 blog.workflow-management-softwa GET / HTTP/1.1
   6-0  62718 2/2/6737   K 0.02 1    259  3292960 66.1  0.06  166.39 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=1758247008 HTTP/1.1
   7-0  61418 0/48/6152  W 1.16 0    0    2996950 0.0   1.21  158.92 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   8-0  59076 3/80/6109  K 1.92 1    261  2848381 95.3  2.17  142.19 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=1413825148 HTTP/1.1
   9-0  62727 1/1/6035   K 0.00 0    1079 2925914 159.2 0.16  148.05 80.82.77.202   http/1.1 blog.workflow-management-softwa GET / HTTP/1.1
   10-0 59738 1/56/5766  K 1.34 3    257  2794465 33.8  1.54  142.19 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=1503283986 HTTP/1.1
   11-0 59802 0/69/6022  _ 1.74 0    0    2860027 0.0   2.03  160.92 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   12-0 59813 2/82/5301  K 2.03 2    268  2760285 65.8  1.98  129.91 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=575845328 HTTP/1.1
   13-0 61427 0/41/5346  _ 0.97 0    384  2527587 0.0   0.96  128.93 217.113.194.19 http/1.1 nigeriadecide.org:80            GET /blog/david-west-forget-2015-if-inec-fails-ekiti-osun/feed/
   14-0 62728 1/1/5083   K 0.00 1    259  2594834 35.3  0.03  121.85 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=3610919274 HTTP/1.1
   15-0 50495 0/282/5601 R 7.24 4    5    2697201 0.0   7.46  133.00 80.82.77.202   http/1.1
   16-0 -     0/0/4928   . 0.00 713  0    3165165 0.0   0.00  129.91 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/4911   . 0.00 494  4    2319012 0.0   0.00  125.29 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -     0/0/3970   . 0.00 269  0    1973597 0.0   0.00  98.22  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/4087   . 0.00 274  0    1959522 0.0   0.00  101.16 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/3891   . 0.00 810  0    1906685 0.0   0.00  95.46  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 51281 0/233/2900 R 6.11 38   314  1457560 0.0   6.20  69.77  105.117.1.111  http/1.1
   22-0 -     0/0/3022   . 0.00 171  0    1417459 0.0   0.00  70.06  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/2811   . 0.00 467  0    1331827 0.0   0.00  64.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/2871   . 0.00 688  0    1535087 0.0   0.00  88.45  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/2070   . 0.00 771  0    1104901 0.0   0.00  50.06  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/1480   . 0.00 770  0    833292  0.0   0.00  36.27  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/1825   . 0.00 175  0    1006429 0.0   0.00  43.59  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/1502   . 0.00 4982 0    804838  0.0   0.00  33.41  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/1590   . 0.00 4116 0    853313  0.0   0.00  38.67  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/1142   . 0.00 4981 0    645034  0.0   0.00  29.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/1240   . 0.00 4973 0    555517  0.0   0.00  33.06  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/747    . 0.00 4774 0    402640  0.0   0.00  20.61  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/1047   . 0.00 4978 0    641345  0.0   0.00  29.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/639    . 0.00 4733 0    329465  0.0   0.00  16.27  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/517    . 0.00 4963 0    284168  0.0   0.00  13.47  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/698    . 0.00 4566 0    340948  0.0   0.00  19.94  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/581    . 0.00 4980 0    316089  0.0   0.00  17.51  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/560    . 0.00 4211 0    281890  0.0   0.00  15.60  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/146    . 0.00 4977 0    69846   0.0   0.00  3.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/639    . 0.00 4687 0    332944  0.0   0.00  15.73  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/94     . 0.00 5072 0    46768   0.0   0.00  2.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/135    . 0.00 5071 0    70951   0.0   0.00  3.32   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/266    . 0.00 5057 0    100462  0.0   0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/210    . 0.00 5058 0    111671  0.0   0.00  5.35   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/202    . 0.00 4651 0    96196   0.0   0.00  5.80   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/290    . 0.00 5069 0    151806  0.0   0.00  7.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/70     . 0.00 5070 0    35217   0.0   0.00  1.50   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/408    . 0.00 4588 0    193592  0.0   0.00  9.83   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/48     . 0.00 4976 0    23887   0.0   0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/61     . 0.00 5066 0    37811   0.0   0.00  1.40   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/82     . 0.00 5067 0    40275   0.0   0.00  1.78   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/41     . 0.00 5059 0    14661   0.0   0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/80     . 0.00 5085 0    38738   0.0   0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/179    . 0.00 5050 0    93196   0.0   0.00  5.15   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/102    . 0.00 4969 0    53549   0.0   0.00  2.46   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/120    . 0.00 5088 0    56500   0.0   0.00  3.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/13     . 0.00 5051 0    3559    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/34     . 0.00 5006 0    13539   0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 5062 0    103     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/192    . 0.00 5040 0    100024  0.0   0.00  5.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/12     . 0.00 5089 0    5547    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/50     . 0.00 4970 0    22451   0.0   0.00  1.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/25     . 0.00 4967 0    11908   0.0   0.00  0.43   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/9      . 0.00 5037 0    4843    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00 5054 0    1793    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/9      . 0.00 5030 0    3592    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 5086 0    0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/23     . 0.00 5002 0    11930   0.0   0.00  0.49   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/6      . 0.00 5049 0    2254    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 5068 0    27      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/7      . 0.00 5035 0    2309    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/9      . 0.00 5036 0    3554    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/44     . 0.00 4916 0    21261   0.0   0.00  0.90   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00 5084 0    0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/21     . 0.00 4986 0    9134    0.0   0.00  0.44   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/8      . 0.00 5039 0    4157    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/1      . 0.00 5087 0    0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 5064 0    529     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 5083 0    0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 5065 0    29      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 894
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...32)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 110506
   total entries replaced since starting: 0
   total entries expired since starting: 109584
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 38 hit, 300 miss
   total removes since starting: 30 hit, 17 miss
Youez - 2016 - github.com/yon3zu
LinuXploit