403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.01.15.txt
 ## swap threshold exceeded
## server overview
2025-11-08.01.15 load[0] mem[54/74] mysql[3/12] httpd[6]
              total        used        free      shared  buff/cache   available
Mem:           2363        1199         265          78         898         913
Swap:          1999        1534         465
 01:15:01 up  6:25,  0 users,  load average: 0.58, 0.68, 0.69
## system overview
top - 01:15:01 up  6:25,  0 users,  load average: 0.58, 0.68, 0.69
Tasks: 204 total,   3 running, 199 sleeping,   0 stopped,   2 zombie
%Cpu(s): 78.1 us, 21.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   270212 free,  1229872 used,   920216 buff/cache
KiB Swap:  2047996 total,   476668 free,  1571328 used.   934100 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 267372   2440 S 112.5 11.0   8:55.69 /usr/sbin+
 22766 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.05 /opt/cpan+
 22862 cloudsms  20   0       0      0      0 Z  12.5  0.0   0:00.02 [php-cgi]+
 22693 root      20   0  162436   5832   4336 S   6.2  0.2   0:00.01 sshd: roo+
     1 root      20   0   44416   3432   1480 S   0.0  0.1   0:33.35 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.73 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.43 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:28.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.42 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.93 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.01 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.56 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.92 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.24 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   4716   4464 S   0.0  0.2   0:13.20 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    296    168 S   0.0  0.0   0:02.22 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    992    592 S   0.0  0.0   0:03.04 /usr/lib/+
   486 root      20   0  152780    128     84 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    400    292 S   0.0  0.0   0:00.53 /usr/sbin+
   495 root      20   0   52852    128     20 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1340    624 S   0.0  0.1   0:11.97 /usr/bin/+
   501 nscd      20   0  994492   3456    716 S   0.0  0.1   0:10.94 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224144   3296    800 S   0.0  0.1   0:00.30 queueproc+
   536 root      20   0   24896   1428    816 S   0.0  0.1   0:05.30 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    484    316 S   0.0  0.0   0:00.64 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3412    392 S   0.0  0.1   0:00.38 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.26 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.00 /usr/bin/+
  1114 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  38068   5860 S   0.0  1.6   0:12.61 /usr/loca+
  1118 systuser  20   0   13012     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51508    500    336 S   0.0  0.0   0:00.29 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.50 pure-ftpd+
  1126 systuser  20   0  114016  13508   2852 S   0.0  0.6   0:05.20 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:03.32 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.49 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:05.89 php-fpm: +
  1134 root      20   0  436392  19036  11532 S   0.0  0.8   0:00.80 php-fpm: +
  1135 root      20   0  290128   5272   4200 S   0.0  0.2   0:06.75 /usr/sbin+
  1138 root      20   0 1763032  77800    236 S   0.0  3.2   0:14.01 /usr/loca+
  1162 root      20   0  385496   5788    752 S   0.0  0.2   0:00.68 php-fpm: +
  1168 named     20   0  859128  40956    804 S   0.0  1.7   0:12.25 /usr/sbin+
  1170 root      20   0  261688   7364   1756 S   0.0  0.3   0:06.02 cpsrvd (S+
  1179 root      20   0  386112   5436    812 S   0.0  0.2   0:00.66 php-fpm: +
  1191 root      20   0  392856   6364    768 S   0.0  0.3   0:00.67 php-fpm: +
  1192 systuser  20   0  111864     68      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3440   2212 S   0.0  0.1   0:19.10 /usr/loca+
  1278 dovenull  20   0   47048   1608    820 S   0.0  0.1   0:00.50 dovecot/p+
  1279 dovenull  20   0   48280   1988    268 S   0.0  0.1   0:00.27 dovecot/i+
  1280 dovecot   20   0   10320    392    276 S   0.0  0.0   0:00.07 dovecot/a+
  1281 root      20   0   10452    612    408 S   0.0  0.0   0:00.29 dovecot/l+
  1282 dovenull  20   0   47336   1488    548 S   0.0  0.1   0:00.39 dovecot/p+
  1283 dovenull  20   0   47912   2992   1456 S   0.0  0.1   0:00.23 dovecot/i+
  1287 root      20   0   24528   2152    264 S   0.0  0.1   0:00.15 dovecot/c+
  1292 dovecot   20   0   13568    496    284 S   0.0  0.0   0:00.06 dovecot/s+
  1350 root      20   0  248084  56268    904 S   0.0  2.3   0:05.54 /usr/loca+
  1362 systuser  20   0  157708   2760    772 S   0.0  0.1   0:00.11 SonarPush+
  1365 dovecot   20   0   41188   1476    996 S   0.0  0.1   0:00.51 dovecot/a+
  1413 wp-tool+  20   0  387556  13008   1424 S   0.0  0.5   0:00.26 /usr/bin/+
  1414 wp-tool+  20   0  410480  35404   1436 S   0.0  1.5   0:18.89 /usr/bin/+
  1430 root      20   0  183900   3704    468 S   0.0  0.2   0:03.23 cpdavd - +
  1435 root      20   0  209816  10184   1648 S   0.0  0.4   0:02.21 tailwatchd
  1436 root      20   0  167452   2368    996 S   0.0  0.1   0:00.39 dnsadmin +
  1844 root      20   0  299272    720    356 S   0.0  0.0   0:00.61 php-fpm: +
  1905 root      38  18  130416   1384    700 S   0.0  0.1   0:00.05 cpanellog+
  2132 root      20   0  266984  26356   1116 S   0.0  1.1   0:01.70 /usr/sbin+
  4170 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5625 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5902 root      20   0  269784 104548   1232 S   0.0  4.3   0:03.56 spamd chi+
  5903 root      20   0  261484  97100    652 S   0.0  4.0   0:00.25 spamd chi+
  5981 root      20   0   12740    692    480 S   0.0  0.0   0:00.17 /usr/loca+
  5982 root      20   0   12732    648    460 S   0.0  0.0   0:00.14 /usr/loca+
  5983 root      20   0   12744    700    480 S   0.0  0.0   0:00.16 /usr/loca+
  5984 root      20   0   53340   9760    432 S   0.0  0.4   0:00.04 /usr/loca+
  5985 nobody    20   0  277596  35536   4256 S   0.0  1.5   0:01.97 /usr/sbin+
  7223 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
  8253 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152    484      0 S   0.0  0.0   0:00.42 [kworker]
  9074 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 11442 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12266 nobody    20   0  277852  35588   4084 S   0.0  1.5   0:01.17 /usr/sbin+
 13861 root      20   0  183048   1060    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 13980 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 14462 root      20   0 1341636  10216    332 S   0.0  0.4   0:00.06 /usr/bin/+
 14500 root      20   0 1277312  11628    332 S   0.0  0.5   0:00.06 /usr/bin/+
 16501 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17255 nobody    20   0  277504  35276   4088 S   0.0  1.5   0:00.72 /usr/sbin+
 18269 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 18834 nobody    20   0  277892  35568   4176 S   0.0  1.5   0:00.46 /usr/sbin+
 20355 nobody    20   0  277560  35068   3828 S   0.0  1.4   0:00.28 /usr/sbin+
 20371 nobody    20   0  277572  35192   3932 S   0.0  1.5   0:00.28 /usr/sbin+
 20373 nobody    20   0  277560  35136   3892 S   0.0  1.5   0:00.35 /usr/sbin+
 20403 nobody    20   0  277748  35512   4104 S   0.0  1.5   0:00.34 /usr/sbin+
 20414 nobody    20   0  277680  35272   3916 S   0.0  1.5   0:00.19 /usr/sbin+
 20589 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 20622 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21192 nobody    20   0  277532  35092   3876 S   0.0  1.4   0:00.17 /usr/sbin+
 21629 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21686 nobody    20   0  277756  35184   3776 S   0.0  1.5   0:00.15 /usr/sbin+
 21811 nobody    20   0  277892  35288   3912 S   0.0  1.5   0:00.12 /usr/sbin+
 22162 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 22171 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 22195 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 22216 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 22281 nobody    20   0  277508  34816   3632 S   0.0  1.4   0:00.05 /usr/sbin+
 22288 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 22355 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 22464 root      20   0   41052   2800   2132 S   0.0  0.1   0:00.00 dovecot/a+
 22472 healtho+  20   0  459288  72080   4188 S   0.0  3.0   0:04.47 php-fpm: +
 22569 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
 22645 healtho+  20   0  442904  55540   4188 S   0.0  2.3   0:00.58 php-fpm: +
 22692 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 22694 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 22701 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 22702 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22703 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22704 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22705 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22706 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22707 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22709 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22710 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22711 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22712 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 22713 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 22715 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22735 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22736 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22737 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22738 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 22739 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22740 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22742 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 22744 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 22745 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22746 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22747 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 22748 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 22750 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 22751 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 22756 root      20   0  188208  11096   5148 S   0.0  0.5   0:00.02 /usr/loca+
 22757 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 22760 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 22769 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 22779 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 22805 root      20   0  160224   2340   1636 S   0.0  0.1   0:00.00 top -n 2 +
 22849 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 22856 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 22859 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 22861 cloudsms  20   0  113284   1212   1036 R   0.0  0.1   0:00.00 /usr/loca+
 75823 root      20   0  181564  28640   1344 S   0.0  1.2   0:04.83 lfd - sle+
 76623 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      76623  0.0  0.0      0     0 ?        S    00:01   0:00  \_ [kworker/0:5]
root       4170  0.0  0.0      0     0 ?        S    00:44   0:00  \_ [kworker/1:3]
root       5625  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root       7223  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/0:0]
root       9074  0.0  0.0      0     0 ?        S    00:52   0:00  \_ [kworker/u200:2]
root      11442  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/1:4]
root      13980  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:2]
root      16501  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/1:0]
root      18269  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:1]
root      20589  0.0  0.0      0     0 ?        D    01:11   0:00  \_ [kworker/0:3]
root      20622  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/1:1]
root      21629  0.0  0.0      0     0 ?        S    01:13   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44416  3432 ?        Ss   Nov07   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4716 ?        Ss   Nov07   0:13 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   296 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   992 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   128 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   400 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   128 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1340 ?        Ss   Nov07   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3456 ?        Ssl  Nov07   0:10 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.1 224144  3296 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1428 ?        Ss   Nov07   0:05 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124480   484 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      22701  0.0  0.0 183048  2136 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22742  0.0  0.0 113284  1208 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      22748  0.0  0.0 108052   360 ?        S    01:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      22757  0.0  0.0 113288  1516 ?        S    01:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      22863  0.0  0.0 153840  2092 ?        R    01:15   0:00  |               \_ ps auxf
root      22702  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22746  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      22703  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22739  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      22704  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22751  0.0  0.0  20164   988 ?        Ss   01:15   0:00  |   \_ jailshell (cloudsms) [22859] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  22859  0.0  0.0      0     0 ?        R    01:15   0:00  |       \_ [jailshell]
root      22705  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22736  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      22706  0.0  0.0 183048  2140 ?        R    01:15   0:00  \_ /usr/sbin/CROND -n
root      22738  0.0  0.0      0     0 ?        Zs   01:15   0:00  |   \_ [jailshell] <defunct>
root      22707  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22737  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      22709  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22745  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      22710  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22740  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      22711  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22735  0.0  0.0  20164   808 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      22712  0.0  0.0 183048  2136 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22750  0.0  0.0 113284  1208 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      22756  0.0  0.4 188208 11096 ?        S    01:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      22805  0.0  0.0 160224  2340 ?        S    01:15   0:00  |           \_ top -n 2 -b -c
root      22713  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22744  0.0  0.0  20164   972 ?        Ss   01:15   0:00  |   \_ jailshell (pactpay) [22769] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   22769  0.0  0.0  20164   264 ?        S    01:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   22779  0.0  0.7 476724 17484 ?        S    01:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      22715  0.0  0.0 183048  2140 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      22747  0.0  0.0  20164   972 ?        Ss   01:15   0:00      \_ jailshell (nigeria) [22760] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   22760  0.0  0.0  20164   264 ?        S    01:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   22766  0.0  0.6 400652 15940 ?        S    01:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3412 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.5 5654048 38068 ?       SLsl Nov07   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    40 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51508   500 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1278  0.0  0.0  47048  1608 ?        S    Nov07   0:00  \_ dovecot/pop3-login
dovenull   1279  0.0  0.0  48280  1988 ?        S    Nov07   0:00  \_ dovecot/imap-login
dovecot    1280  0.0  0.0  10320   392 ?        S    Nov07   0:00  \_ dovecot/anvil
root       1281  0.0  0.0  10452   612 ?        S    Nov07   0:00  \_ dovecot/log
dovenull   1282  0.0  0.0  47336  1488 ?        S    Nov07   0:00  \_ dovecot/pop3-login
dovenull   1283  0.0  0.1  47912  2992 ?        S    Nov07   0:00  \_ dovecot/imap-login
root       1287  0.0  0.0  24528  2152 ?        S    Nov07   0:00  \_ dovecot/config
dovecot    1292  0.0  0.0  13568   496 ?        S    Nov07   0:00  \_ dovecot/stats
dovecot    1365  0.0  0.0  41188  1476 ?        S    Nov07   0:00  \_ dovecot/auth
root      22355  0.0  0.1  60820  4512 ?        S    01:14   0:00  \_ dovecot/lmtp
root      22464  0.0  0.1  41052  2800 ?        S    01:14   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13508 ?        Ssl  Nov07   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:03 /usr/sbin/sshd -D
root      22162  0.0  0.1 111304  4264 ?        Ss   01:14   0:00  \_ sshd: [accepted]
sshd      22171  0.0  0.1 115644  2632 ?        S    01:14   0:00  |   \_ sshd: [net]
root      22195  0.0  0.1 111304  4272 ?        Ss   01:14   0:00  \_ sshd: [accepted]
sshd      22216  0.0  0.1 115644  2628 ?        S    01:14   0:00  |   \_ sshd: [net]
root      22288  0.0  0.1 111304  4264 ?        Ss   01:14   0:00  \_ sshd: [accepted]
root      22693  0.0  0.2 162436  5832 ?        Ss   01:15   0:00  \_ sshd: root [priv]
sshd      22694  0.0  0.1 115644  2632 ?        S    01:15   0:00      \_ sshd: root [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  22472 18.6  2.9 459288 72080 ?        S    01:14   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   22569  0.0  0.3 397064  8124 ?        S    01:14   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  22645 11.6  2.2 442904 55540 ?        S    01:14   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.7 436392 19036 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.2 290128  5272 ?        Ssl  Nov07   0:06 /usr/sbin/rsyslogd -n
root       1138  0.0  3.2 1763032 77800 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5788 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.6 859128 40956 ?        Ssl  Nov07   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.3 261688  7364 ?        Ss   Nov07   0:06 cpsrvd (SSL) - waiting for connections                   
root      22692  0.0  0.0      0     0 ?        Z    01:14   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5436 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6364 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    68 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3440 ?        Rs   Nov07   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  2.3 248084 56268 ?        Ss   Nov07   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  4.3 269784 104548 ?       S    Nov07   0:03  \_ spamd child
root       5903  0.0  4.0 261484 97100 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2760 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.5 387556 13008 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  1.4 410480 35404 ?        Ss   Nov07   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  0.1 183900  3704 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1435  0.0  0.4 209816 10184 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.0 167452  2368 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   720 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1384 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 11.0 1458856 267372 ?      Sl   Nov07   8:55 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.0 266984 26356 ?        Ss   Nov07   0:01 /usr/sbin/httpd -k start
root       5981  0.0  0.0  12740   692 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       5982  0.0  0.0  12732   648 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       5983  0.0  0.0  12744   700 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       5984  0.0  0.4  53340  9760 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     5985  0.1  1.4 277596 35536 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    12266  0.1  1.4 277852 35588 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody    17255  0.1  1.4 277504 35276 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    18834  0.1  1.4 277892 35568 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    20355  0.1  1.4 277560 35068 ?        R    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    20371  0.1  1.4 277572 35192 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    20373  0.1  1.4 277560 35136 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    20403  0.1  1.4 277748 35512 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    20414  0.0  1.4 277680 35272 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    21192  0.0  1.4 277532 35092 ?        S    01:12   0:00  \_ /usr/sbin/httpd -k start
nobody    21686  0.1  1.4 277756 35184 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    21811  0.1  1.4 277892 35288 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    22281  0.1  1.4 277508 34816 ?        S    01:14   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148   416 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152   484 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.1 181564 28640 ?        Ss   00:00   0:04 lfd - sleeping
root      14462  0.0  0.4 1341636 10216 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      14500  0.0  0.4 1277312 11628 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 23094  Threads: 3  Questions: 4294025  Slow queries: 0  Opens: 7133  Flush tables: 1  Open tables: 2000  Queries per second avg: 185.936
*************************** 1. row ***************************
     Id: 60654
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 60656
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 60665
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.216 TIME_WAIT
      1 213.180.203.51 TIME_WAIT
      1 216.73.216.88 TIME_WAIT
      1 52.167.144.162 TIME_WAIT
      1 52.167.144.201 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     13 104.248.90.230 TIME_WAIT
     38 103.253.27.139 TIME_WAIT
     38 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 01:15:01 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 6 hours 24 minutes 49 seconds
   Server load: 0.58 0.68 0.69
   Total accesses: 114842 - Total Traffic: 1.9 GB - Total Duration: 59933006
   CPU Usage: u5.03 s2.92 cu1008.95 cs686.21 - 7.38% CPU load
   4.97 requests/sec - 88.5 kB/second - 17.8 kB/request - 521.874 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K.KKW___.....W......._......K.R.......................K.........
.R..............................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot      Client     Protocol           VHost                        Request
   0-1  22281 1/11/6328  K 0.11 3    413 3326894 36.0 0.18  119.28 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=2568790883 HTTP/1.1
   1-1  -     0/0/6709   . 0.00 85   0   3574582 0.0  0.00  128.19 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-1  18834 2/109/6577 K 1.94 3    405 3428179 70.4 1.78  117.94 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=1067809150 HTTP/1.1
   3-1  17255 1/161/5794 K 3.42 0    281 3047004 35.6 2.88  104.79 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=3411668686 HTTP/1.1
   4-1  21192 0/54/6490  W 0.38 0    0   3208349 0.0  3.01  103.38 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-1  21686 0/33/6084  _ 0.66 0    297 3167262 0.0  2.33  108.55 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-1  5985  0/445/6054 _ 7.64 0    0   3209589 0.0  8.04  117.48 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-1  21811 0/34/5659  _ 0.37 0    0   2973280 0.0  0.62  102.28 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   8-1  -     0/0/5489   . 0.00 237  0   3036694 0.0  0.00  91.98  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-1  -     0/0/5343   . 0.00 223  0   2908130 0.0  0.00  90.82  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-1 -     0/0/5266   . 0.00 209  0   2787818 0.0  0.00  105.19 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-1 -     0/0/5441   . 0.00 241  0   2635509 0.0  0.00  83.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-1 -     0/0/4912   . 0.00 240  0   2420585 0.0  0.00  75.86  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 20355 0/67/3491  W 1.00 0    0   1899728 0.0  1.08  58.69  66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=3125360785 HTTP/1.1
   14-1 -     0/0/3482   . 0.00 242  0   1740983 0.0  0.00  54.41  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/3870   . 0.00 205  0   1927755 0.0  0.00  62.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 -     0/0/3638   . 0.00 92   0   1904378 0.0  0.00  61.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-1 -     0/0/3373   . 0.00 256  0   1766721 0.0  0.00  53.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 -     0/0/1953   . 0.00 196  0   1252353 0.0  0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-1 -     0/0/1892   . 0.00 222  0   1190524 0.0  0.00  29.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-1 -     0/0/1690   . 0.00 238  0   943039  0.0  0.00  27.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-1 12266 0/274/1380 _ 4.54 0    301 878448  0.0  4.72  23.17  103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   22-1 -     0/0/1625   . 0.00 208  0   884654  0.0  0.00  27.66  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-1 -     0/0/356    . 0.00 216  0   179049  0.0  0.00  6.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 -     0/0/1571   . 0.00 228  0   851770  0.0  0.00  31.82  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1 -     0/0/1668   . 0.00 229  0   726500  0.0  0.00  26.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-1 -     0/0/927    . 0.00 219  0   501983  0.0  0.00  19.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1 -     0/0/306    . 0.00 239  0   130059  0.0  0.00  3.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1 20371 2/73/293   K 0.94 2    400 107452  66.7 2.17  4.46   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=378750243 HTTP/1.1
   29-1 -     0/0/140    . 0.00 255  0   53797   0.0  0.00  2.81   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 20373 0/80/88    R 1.30 1    408 36799   0.0  1.59  1.63   103.253.27.28  http/1.1 health.oyostate.gov.ng:443
   31-1 -     0/0/572    . 0.00 218  0   301428  0.0  0.00  14.30  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-1 -     0/0/20     . 0.00 197  0   5335    0.0  0.00  0.27   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-1 -     0/0/10     . 0.00 217  0   2668    0.0  0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1 -     0/0/57     . 0.00 211  0   31434   0.0  0.00  0.94   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/9      . 0.00 253  0   713     0.0  0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-1 -     0/0/250    . 0.00 236  0   133881  0.0  0.00  3.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-1 -     0/0/68     . 0.00 220  0   36852   0.0  0.00  1.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1 -     0/0/9      . 0.00 254  0   3804    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/41     . 0.00 107  0   19419   0.0  0.00  0.63   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 -     0/0/39     . 0.00 134  0   16439   0.0  0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/18     . 0.00 201  0   5864    0.0  0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/315    . 0.00 227  0   150508  0.0  0.00  4.40   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/1820   . 0.00 252  0   789911  0.0  0.00  30.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/7      . 0.00 251  0   66      0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-1 -     0/0/185    . 0.00 250  0   96922   0.0  0.00  2.78   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/8      . 0.00 243  0   169     0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/17     . 0.00 214  0   9271    0.0  0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/320    . 0.00 248  0   125489  0.0  0.00  3.80   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/14     . 0.00 226  0   5599    0.0  0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-1 -     0/0/60     . 0.00 231  0   30419   0.0  0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-1 -     0/0/87     . 0.00 235  0   45865   0.0  0.00  1.42   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-1 -     0/0/14     . 0.00 200  0   6623    0.0  0.00  0.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-1 -     0/0/857    . 0.00 221  0   410556  0.0  0.00  15.88  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-1 20403 2/71/74    K 1.32 0    365 36441   66.8 1.44  1.45   66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=24520671 HTTP/1.1
   55-1 -     0/0/7      . 0.00 246  0   2293    0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-1 -     0/0/13     . 0.00 247  0   6985    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-1 -     0/0/18     . 0.00 186  0   7494    0.0  0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00 21   0   26486   0.0  0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00 245  0   37042   0.0  0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00 203  0   4755    0.0  0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00 249  0   8011    0.0  0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00 225  0   3968    0.0  0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00 210  0   126089  0.0  0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00 204  0   196325  0.0  0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 20414 0/48/51    R 0.86 1    1   18202   0.0  1.14  1.16   103.253.27.139 http/1.1 health.oyostate.gov.ng:443
   66-1 -     0/0/234    . 0.00 212  0   130247  0.0  0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00 244  0   4952    0.0  0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00 198  0   5501    0.0  0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00 215  0   4783    0.0  0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00 230  0   9834    0.0  0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00 224  0   3804    0.0  0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00 232  0   1625    0.0  0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00 188  0   3678    0.0  0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00 206  0   5547    0.0  0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00 207  0   2381    0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00 233  0   3573    0.0  0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00 202  0   351530  0.0  0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 7816 0   641     0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00 7804 0   1675    0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 793
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...36)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 2830
   total entries replaced since starting: 0
   total entries expired since starting: 2019
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 17 miss
   total removes since starting: 18 hit, 18 miss
Youez - 2016 - github.com/yon3zu
LinuXploit