403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.04.03.txt
 ## swap threshold exceeded
## server overview
2025-11-07.04.03 load[0] mem[76/38] mysql[2/8] httpd[5]
              total        used        free      shared  buff/cache   available
Mem:           2363        1757          81          18         524         419
Swap:          1999         901        1098
 04:03:02 up 18 min,  0 users,  load average: 0.41, 0.78, 0.72
## system overview
top - 04:03:02 up 18 min,  0 users,  load average: 0.41, 0.78, 0.72
Tasks: 169 total,   2 running, 166 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.5 us, 12.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    92032 free,  1787788 used,   540480 buff/cache
KiB Swap:  2047996 total,  1124860 free,   923136 used.   441508 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1461416 200440   3932 S 125.0  8.3   0:25.46 /usr/sbin+
 10400 healtho+  20   0  457240  67412   4216 S  31.2  2.8   0:02.36 php-fpm: +
 10500 nigeria   20   0  400652  15940  10220 R  18.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44424   3492   1564 S   0.0  0.1   0:02.71 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:01.35 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:06.17 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.41 [kworker/+
   270 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:00.55 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   5068   4756 S   0.0  0.2   0:00.61 /usr/lib/+
   382 root      20   0   45352    240     92 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    320    188 S   0.0  0.0   0:00.07 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1200    812 S   0.0  0.0   0:00.29 /usr/lib/+
   493 root      20   0  224268   5452    776 S   0.0  0.2   0:00.09 queueproc+
   494 root      20   0  152780     76     68 S   0.0  0.0   0:00.00 /usr/sbin+
   499 nscd      20   0  861368    988    588 S   0.0  0.0   0:00.37 /usr/sbin+
   500 rpc       20   0   69256    188     80 S   0.0  0.0   0:00.01 /sbin/rpc+
   503 dbus      20   0   56904   1316    628 S   0.0  0.1   0:00.67 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852     92     88 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    932    532 S   0.0  0.0   0:00.17 /usr/lib/+
   541 root      20   0   21540    408    300 S   0.0  0.0   0:00.02 /usr/sbin+
   551 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    476    308 S   0.0  0.0   0:00.03 /usr/sbin+
   558 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704     28     28 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3800    840 S   0.0  0.2   0:00.04 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:02.19 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  11948   2364 S   0.0  0.5   0:00.36 /usr/loca+
   960 systuser  20   0   11604     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   961 root      20   0  572372    640    176 S   0.0  0.0   0:00.20 /usr/bin/+
   963 telegraf  20   0 5654048  36620   3364 S   0.0  1.5   0:00.84 /usr/loca+
   964 root      20   0   51508    452    288 S   0.0  0.0   0:00.04 /usr/sbin+
   966 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.06 sw-engine+
   968 systuser  20   0  111608   1676      0 S   0.0  0.1   0:00.00 /usr/loca+
   969 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   970 systuser  20   0  113932   2000      0 S   0.0  0.1   0:00.00 /usr/loca+
   981 named     20   0  711660  26292   1392 S   0.0  1.1   0:01.00 /usr/sbin+
   982 root      20   0 1763064 757088    268 S   0.0 31.3   0:13.76 /usr/loca+
   984 root      20   0  386112    576    368 S   0.0  0.0   0:00.10 php-fpm: +
   992 root      20   0  397344   2876    616 S   0.0  0.1   0:00.36 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.02 /usr/bin/+
  1007 root      20   0  392856    588    412 S   0.0  0.0   0:00.10 php-fpm: +
  1012 root      20   0  385496    548    340 S   0.0  0.0   0:00.10 php-fpm: +
  1013 root      20   0  216400   4528   3924 S   0.0  0.2   0:00.31 /usr/sbin+
  1014 root      20   0  261028   4028    884 S   0.0  0.2   0:00.27 cpsrvd (S+
  1017 root      20   0  436392  11308  11104 S   0.0  0.5   0:00.16 php-fpm: +
  1018 root      20   0  153404    300    216 S   0.0  0.0   0:00.02 pure-ftpd+
  1020 root      20   0  111304    396    300 S   0.0  0.0   0:00.09 /usr/sbin+
  1026 cpanelc+  20   0    9700   2564   2224 S   0.0  0.1   0:00.84 /usr/loca+
  1096 dovenull  20   0   46912   1300    628 S   0.0  0.1   0:00.02 dovecot/p+
  1097 dovenull  20   0   47056   1448    732 S   0.0  0.1   0:00.00 dovecot/i+
  1098 dovecot   20   0   10320    188     76 S   0.0  0.0   0:00.00 dovecot/a+
  1099 root      20   0   10452    452    272 S   0.0  0.0   0:00.01 dovecot/l+
  1100 dovenull  20   0   46912   1168    572 S   0.0  0.0   0:00.04 dovecot/p+
  1101 dovenull  20   0   47056   1352    568 S   0.0  0.1   0:00.00 dovecot/i+
  1108 root      20   0   24556   2288    448 S   0.0  0.1   0:00.02 dovecot/c+
  1113 dovecot   20   0   13568    500    252 S   0.0  0.0   0:00.00 dovecot/s+
  1182 dovecot   20   0   41168   1112    672 S   0.0  0.0   0:00.01 dovecot/a+
  1212 root      20   0  248204 117396    964 S   0.0  4.9   0:02.99 /usr/loca+
  1218 systuser  20   0  157708   2908    860 S   0.0  0.1   0:00.01 SonarPush+
  1233 wp-tool+  20   0  410452  37104   3304 S   0.0  1.5   0:01.12 /usr/bin/+
  1234 wp-tool+  20   0  387528  13748   2204 S   0.0  0.6   0:00.09 /usr/bin/+
  1264 root      20   0  183900   6448   3216 S   0.0  0.3   0:00.19 cpdavd - +
  1265 root      20   0  209780  11924   1776 S   0.0  0.5   0:00.32 tailwatchd
  1267 root      20   0  167452   1388    784 S   0.0  0.1   0:00.06 dnsadmin +
  1713 root      20   0  299272    748    372 S   0.0  0.0   0:00.02 php-fpm: +
  1728 root      38  18  130416   1420    700 S   0.0  0.1   0:00.00 cpanellog+
  1968 root      20   0  266984   7988    712 S   0.0  0.3   0:00.13 /usr/sbin+
  1970 root      20   0   12764    412    280 S   0.0  0.0   0:00.08 /usr/loca+
  1971 root      20   0   12732    268    192 S   0.0  0.0   0:00.07 /usr/loca+
  1972 root      20   0   12768    332    224 S   0.0  0.0   0:00.08 /usr/loca+
  1977 root      20   0   53340     84     84 S   0.0  0.0   0:00.05 /usr/loca+
  1979 nobody    20   0  277548  13152   3864 S   0.0  0.5   0:00.94 /usr/sbin+
  1980 nobody    20   0  277856  13168   3968 S   0.0  0.5   0:01.04 /usr/sbin+
  1981 nobody    20   0  277848  12864   3780 S   0.0  0.5   0:01.14 /usr/sbin+
  2041 root      20   0  180960   9376   1152 S   0.0  0.4   0:01.05 lfd - sle+
  2117 nobody    20   0  277568  19452   4080 S   0.0  0.8   0:01.15 /usr/sbin+
  2495 nobody    20   0  277544  19176   3920 S   0.0  0.8   0:00.95 /usr/sbin+
  2505 nobody    20   0  277472  19084   3992 S   0.0  0.8   0:00.99 /usr/sbin+
  3071 root      20   0  264120 129200   1364 S   0.0  5.3   0:00.82 spamd chi+
  3072 root      20   0  248204 116648    264 S   0.0  4.8   0:00.00 spamd chi+
  3237 nobody    20   0  277540  19528   4104 S   0.0  0.8   0:01.01 /usr/sbin+
  4887 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5390 nobody    20   0  277524  19288   4000 S   0.0  0.8   0:00.62 /usr/sbin+
  5511 worencom  20   0   38468   2384   1384 S   0.0  0.1   0:00.01 dovecot/i+
  5794 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  5862 nobody    20   0  277868  19244   3956 S   0.0  0.8   0:00.62 /usr/sbin+
  6791 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7231 nobody    20   0  277548  19172   3800 S   0.0  0.8   0:00.40 /usr/sbin+
  7984 nobody    20   0  277524  18740   3644 S   0.0  0.8   0:00.32 /usr/sbin+
  8225 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9063 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.00 [kworker]
  9123 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9463 root      20   0 1276100  10516    596 S   0.0  0.4   0:00.05 /usr/bin/+
  9498 root      20   0 1277312  15192    596 S   0.0  0.6   0:00.05 /usr/bin/+
  9720 root      20   0  123364    768    536 S   0.0  0.0   0:00.00 /usr/sbin+
  9836 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 10100 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10401 healtho+  20   0  457376  67404   4212 S   0.0  2.8   0:02.02 php-fpm: +
 10419 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 10420 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10424 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10426 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10430 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10432 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10435 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 10436 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 10437 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 10467 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 10469 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 10471 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10474 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10489 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 10492 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 10499 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 10518 root      20   0  160236   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:44   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    03:44   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [watchdogd]
root         31  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:1]
root         36  0.5  0.0      0     0 ?        S    03:44   0:06  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:44   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:44   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:2]
root        271  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kvm-irqfd-clean]
root        660  0.1  0.0      0     0 ?        S<   03:44   0:02  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ext4-rsv-conver]
root       4887  0.0  0.0      0     0 ?        S    03:49   0:00  \_ [kworker/0:4]
root       5794  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/1:3]
root       6791  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/u200:1]
root       8225  0.0  0.0      0     0 ?        S    03:58   0:00  \_ [kworker/0:3]
root       9123  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/u200:2]
root      10100  0.0  0.0      0     0 ?        S    04:02   0:00  \_ [kworker/1:2]
root          1  0.2  0.1  44424  3492 ?        Ss   03:44   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40240  5068 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352   240 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   320 ?        S<sl 03:44   0:00 /sbin/auditd
root        489  0.0  0.0  24720  1200 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd-logind
root        493  0.0  0.2 224268  5452 ?        Ss   03:44   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   03:44   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 861368   988 ?        Ssl  03:44   0:00 /usr/sbin/nscd
rpc         500  0.0  0.0  69256   188 ?        Ss   03:44   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  56904  1316 ?        Ss   03:44   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  03:44   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852    92 ?        Ss   03:44   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   932 ?        Ssl  03:44   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   408 ?        Ss   03:44   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     0 ?        Ss   03:44   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   476 ?        Ss   03:44   0:00 /usr/sbin/crond -n
root      10420  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      10435  0.0  0.0 113284  1208 ?        Ss   04:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      10436  0.0  0.0 108052   360 ?        S    04:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      10437  0.0  0.0 113288  1516 ?        S    04:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      10523  0.0  0.0 153672  1780 ?        R    04:03   0:00  |               \_ ps auxf
root      10424  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      10474  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      10426  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      10471  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      10430  0.0  0.0 183048  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      10469  0.0  0.0  20164   968 ?        Ss   04:03   0:00  |   \_ jailshell (pactpay) [10489] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10489  0.0  0.0  20164   264 ?        S    04:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10492  0.0  0.7 476724 17480 ?        S    04:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      10432  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      10467  0.0  0.0  20164   968 ?        Ss   04:03   0:00      \_ jailshell (nigeria) [10499] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10499  0.0  0.0  20164   264 ?        S    04:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10500  0.0  0.6 400652 15940 ?        S    04:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388    48 ?        Ss   03:44   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704    28 ttyS0    Ss+  03:44   0:00 /bin/bash
root        570  0.0  0.0 108296    52 tty1     Ss+  03:44   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3800 ?        Ss   03:44   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 11948 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    52 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   640 ?        Ssl  03:44   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.5 5654048 36620 ?       SLsl 03:44   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   452 ?        Ss   03:44   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1300 ?        S    03:44   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.0  47056  1448 ?        S    03:44   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   188 ?        S    03:44   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   452 ?        S    03:44   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  1168 ?        S    03:44   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.0  47056  1352 ?        S    03:44   0:00  \_ dovecot/imap-login
root       1108  0.0  0.0  24556  2288 ?        S    03:44   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   500 ?        S    03:44   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41168  1112 ?        S    03:44   0:00  \_ dovecot/auth
worencom   5511  0.0  0.0  38468  2384 ?        S    03:50   0:00  \_ dovecot/imap
root       9836  0.0  0.1  60820  4512 ?        S    04:01   0:00  \_ dovecot/lmtp
root        966  0.0  0.1 445028  2604 ?        Ss   03:44   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608  1676 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    48 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932  2000 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.0 711660 26292 ?        Ssl  03:44   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  1.2 31.2 1763064 757088 ?      Ssl  03:44   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   576 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.1 397344  2876 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  10400 23.6  2.7 457240 67412 ?        S    04:02   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  10401 20.2  2.7 457376 67404 ?        S    04:02   0:02  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  03:44   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   588 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   548 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 216400  4528 ?        Ssl  03:44   0:00 /usr/sbin/rsyslogd -n
root       1014  0.0  0.1 261028  4028 ?        Ss   03:44   0:00 cpsrvd (SSL) - waiting for connections                   
root      10419  0.0  0.0      0     0 ?        Z    04:03   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.4 436392 11308 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   300 ?        Ss   03:44   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   396 ?        Ss   03:44   0:00 /usr/sbin/sshd -D
cpanelc+   1026  0.0  0.1   9700  2564 ?        Ss   03:44   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1212  0.2  4.8 248204 117396 ?       Ss   03:44   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       3071  0.0  5.3 264120 129200 ?       S    03:45   0:00  \_ spamd child
root       3072  0.0  4.8 248204 116648 ?       S    03:45   0:00  \_ spamd child
systuser   1218  0.0  0.1 157708  2908 ?        S    03:44   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.1  1.5 410452 37104 ?        Ss   03:44   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.5 387528 13748 ?        Ss   03:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6448 ?        Ss   03:44   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209780 11924 ?        Ss   03:44   0:00 tailwatchd
root       1267  0.0  0.0 167452  1388 ?        Ss   03:44   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   748 ?        Ss   03:44   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1420 ?        SN   03:44   0:00 cpanellogd - sleeping for logs
mysql      1782  2.3  8.2 1461416 200440 ?      Sl   03:44   0:25 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.3 266984  7988 ?        Ss   03:44   0:00 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12764   412 ?        S    03:44   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   268 ?        S    03:44   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12768   332 ?        S    03:44   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340    84 ?        S    03:44   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1979  0.0  0.5 277548 13152 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody     1980  0.0  0.5 277856 13168 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody     1981  0.1  0.5 277848 12864 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody     2117  0.1  0.8 277568 19452 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody     2495  0.0  0.7 277544 19176 ?        S    03:45   0:00  \_ /usr/sbin/httpd -k start
nobody     2505  0.0  0.7 277472 19084 ?        S    03:45   0:00  \_ /usr/sbin/httpd -k start
nobody     3237  0.0  0.8 277540 19528 ?        S    03:46   0:01  \_ /usr/sbin/httpd -k start
nobody     5390  0.0  0.7 277524 19288 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody     5862  0.0  0.7 277868 19244 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody     7231  0.0  0.7 277548 19172 ?        S    03:55   0:00  \_ /usr/sbin/httpd -k start
nobody     7984  0.0  0.7 277524 18740 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.3 180960  9376 ?        Ss   03:44   0:01 lfd - sleeping
oysipao+   9063  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152   424 ?        S    04:00   0:00  \_ [kworker]
root       9463  0.0  0.4 1276100 10516 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root       9498  0.0  0.6 1277312 15192 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
root       9720  0.0  0.0 123364   768 ?        Ss   04:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 1107  Threads: 3  Questions: 170882  Slow queries: 0  Opens: 1347  Flush tables: 1  Open tables: 1251  Queries per second avg: 154.364
*************************** 1. row ***************************
     Id: 2847
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 2851
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2855
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 14.232.237.250 TIME_WAIT
      1 142.44.233.163 TIME_WAIT
      1 154.29.87.181 TIME_WAIT
      1 162.62.213.187 TIME_WAIT
      1 167.114.139.183 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     81 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 04:03:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 18 minutes 20 seconds
   Server load: 0.41 0.78 0.72
   Total accesses: 3596 - Total Traffic: 62.5 MB - Total Duration: 1646103
   CPU Usage: u6.81 s2.5 cu18.76 cs15.37 - 3.95% CPU load
   3.27 requests/sec - 58.2 kB/second - 17.8 kB/request - 457.759 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

R_W_K_._W_._..._................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID     Acc    M CPU   SS  Req  Dur   Conn  Child Slot    Client     Protocol           VHost                        Request
   0-0  5390 0/176/215 R 1.76 3    6   123389 0.0   2.03  2.52 157.230.45.41 http/1.1
   1-0  1979 0/270/270 _ 2.60 0    3   142987 0.0   3.19  3.19 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  1980 1/296/296 W 3.31 0    0   141262 36.3  4.51  4.51 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=1347652692 HTTP/1.1
   3-0  1981 0/325/325 _ 4.97 2    341 134504 0.0   8.73  8.73 157.230.45.41 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  7984 4/97/315  K 0.78 4    350 118653 125.2 1.04  2.83 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=1137625262 HTTP/1.1
   5-0  2117 0/370/370 _ 4.78 1    1   108855 0.0   9.01  9.01 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   6-0  -    0/0/149   . 0.00 435  0   74240  0.0   0.00  1.52 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  2495 0/279/279 _ 3.81 1    341 142398 0.0   7.23  7.23 157.230.45.41 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   8-0  2505 0/278/278 W 3.18 0    0   143912 0.0   3.17  3.17 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   9-0  5862 0/180/228 _ 2.11 0    337 106397 0.0   2.00  2.69 157.230.45.41 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-0 -    0/0/194   . 0.00 107  0   104907 0.0   0.00  2.94 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 7231 0/118/138 _ 1.06 1    1   64839  0.0   5.11  5.45 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   12-0 -    0/0/68    . 0.00 692  0   37703  0.0   0.00  1.94 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -    0/0/3     . 0.00 1008 0   25     0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -    0/0/117   . 0.00 510  0   67873  0.0   0.00  2.84 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 3237 0/349/349 _ 3.38 0    507 133409 0.0   3.91  3.91 157.230.45.41 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   16-0 -    0/0/2     . 0.00 1007 0   741    0.0   0.00  0.01 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 439
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 0...100)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 1580
   total entries replaced since starting: 0
   total entries expired since starting: 1141
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit