403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.01.27.txt
 ## swap threshold exceeded
## server overview
2025-11-08.01.27 load[1] mem[60/77] mysql[5/12] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1364         406          66         592         766
Swap:          1999        1567         432
 01:27:01 up  6:37,  0 users,  load average: 1.52, 1.12, 0.85
## system overview
top - 01:27:01 up  6:37,  0 users,  load average: 1.52, 1.12, 0.85
Tasks: 196 total,   3 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 90.3 us,  9.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   414256 free,  1394984 used,   611060 buff/cache
KiB Swap:  2047996 total,   443388 free,  1604608 used.   787420 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 264572   2588 S 146.7 10.9   9:12.69 /usr/sbin+
 30004 healtho+  20   0  457240  70032   4192 S  13.3  2.9   0:01.70 php-fpm: +
 30146 nigeria   20   0  400652  15936  10220 R  13.3  0.7   0:00.05 /opt/cpan+
   536 root      20   0   24896   1428    816 S   6.7  0.1   0:05.46 /usr/lib/+
 29270 nobody    20   0  278132  35684   3880 S   6.7  1.5   0:00.06 /usr/sbin+
     1 root      20   0   44416   3388   1440 S   0.0  0.1   0:34.20 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.80 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.44 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:29.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.43 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.05 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.04 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.62 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.00 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.28 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   6528   6276 S   0.0  0.3   0:13.58 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    212     92 S   0.0  0.0   0:02.28 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    892    496 S   0.0  0.0   0:03.14 /usr/lib/+
   486 root      20   0  152780    120     76 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    400    292 S   0.0  0.0   0:00.54 /usr/sbin+
   495 root      20   0   52852    276    164 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1332    624 S   0.0  0.1   0:12.32 /usr/bin/+
   501 nscd      20   0  994492   3356    624 S   0.0  0.1   0:11.34 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6716   1656 S   0.0  0.3   0:00.33 queueproc+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.65 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3284    276 S   0.0  0.1   0:00.39 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.28 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.06 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  33324   2816 S   0.0  1.4   0:12.99 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656    916    576 S   0.0  0.0   0:00.31 /usr/sbin+
  1124 root      20   0  153404    272    188 S   0.0  0.0   0:00.51 pure-ftpd+
  1126 systuser  20   0  114016  12852   2320 S   0.0  0.5   0:05.38 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:03.42 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.49 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:06.05 php-fpm: +
  1134 root      20   0  436392  18944  11440 S   0.0  0.8   0:00.82 php-fpm: +
  1135 root      20   0  290128   6728   5732 S   0.0  0.3   0:06.96 /usr/sbin+
  1138 root      20   0 1763032  71956    148 S   0.0  3.0   0:14.01 /usr/loca+
  1162 root      20   0  385496   5672    636 S   0.0  0.2   0:00.70 php-fpm: +
  1168 named     20   0  858124  42708   1048 S   0.0  1.8   0:12.79 /usr/sbin+
  1170 root      20   0  261688   6848   1432 S   0.0  0.3   0:06.34 cpsrvd (S+
  1179 root      20   0  386112   5456    832 S   0.0  0.2   0:00.69 php-fpm: +
  1191 root      20   0  392856   6320    724 S   0.0  0.3   0:00.68 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3432   2212 S   0.0  0.1   0:19.72 /usr/loca+
  1280 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.08 dovecot/a+
  1350 root      20   0  248084  46788    892 S   0.0  1.9   0:05.63 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.11 SonarPush+
  1413 wp-tool+  20   0  387556   3604   1364 S   0.0  0.1   0:00.26 /usr/bin/+
  1414 wp-tool+  20   0  410480  22352   1476 S   0.0  0.9   0:19.48 /usr/bin/+
  1430 root      20   0  262224  21592   3736 S   0.0  0.9   0:03.45 cpdavd - +
  1435 root      20   0  209816   9852   1504 S   0.0  0.4   0:02.26 tailwatchd
  1436 root      20   0  228228  16336   3488 S   0.0  0.7   0:00.44 dnsadmin +
  1844 root      20   0  299272    444    284 S   0.0  0.0   0:00.63 php-fpm: +
  1905 root      38  18  130416   1376    692 S   0.0  0.1   0:00.05 cpanellog+
  2132 root      20   0  266984  30416   4912 S   0.0  1.3   0:01.94 /usr/sbin+
  4170 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5625 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5902 root      20   0  269784  96268   1132 S   0.0  4.0   0:03.61 spamd chi+
  5903 root      20   0  261484  94720    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.43 [kworker]
 13861 root      20   0  183048   1060    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 13980 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 14462 root      20   0 1341636  10176    332 S   0.0  0.4   0:00.07 /usr/bin/+
 14500 root      20   0 1277312  11532    332 S   0.0  0.5   0:00.06 /usr/bin/+
 16501 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18269 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 20589 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 21629 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24321 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26101 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 27095 root      20   0  183048   1596   1060 S   0.0  0.1   0:00.00 /usr/sbin+
 27111 root      20   0  178152  25724   2236 S   0.0  1.1   0:00.13 /usr/loca+
 27154 root      20   0  158808  14808   2216 S   0.0  0.6   0:00.07 /usr/loca+
 27162 root      20   0  195364  34020   2480 S   0.0  1.4   0:00.20 /usr/loca+
 27185 root      20   0   76780  16516   2548 S   0.0  0.7   0:00.15 /usr/loca+
 27739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27916 root      20   0   12820   1264   1084 S   0.0  0.1   0:00.03 /usr/loca+
 27917 root      20   0   12732   1272   1088 S   0.0  0.1   0:00.02 /usr/loca+
 27918 root      20   0   12844   1272   1088 S   0.0  0.1   0:00.02 /usr/loca+
 27919 root      20   0   53340  11428   2100 S   0.0  0.5   0:00.05 /usr/loca+
 27921 nobody    20   0  277904  35732   3916 S   0.0  1.5   0:00.30 /usr/sbin+
 27922 nobody    20   0  277752  35696   4024 S   0.0  1.5   0:00.23 /usr/sbin+
 27924 nobody    20   0  277748  35492   3848 S   0.0  1.5   0:00.17 /usr/sbin+
 27925 dovenull  20   0   46772   2812   1888 S   0.0  0.1   0:00.00 dovecot/p+
 27926 dovenull  20   0   46780   2432   1536 S   0.0  0.1   0:00.00 dovecot/i+
 27927 root      20   0   10452   1080    704 S   0.0  0.0   0:00.00 dovecot/l+
 27928 dovenull  20   0   46772   3000   2076 S   0.0  0.1   0:00.00 dovecot/p+
 27929 dovenull  20   0   47056   3136   2016 S   0.0  0.1   0:00.00 dovecot/i+
 27930 root      20   0   24396  11632    804 S   0.0  0.5   0:00.01 dovecot/c+
 27931 dovecot   20   0   13568   1092    760 S   0.0  0.0   0:00.00 dovecot/s+
 27932 dovecot   20   0   41056   1724    984 S   0.0  0.1   0:00.00 dovecot/a+
 27952 nobody    20   0  277752  35556   3916 S   0.0  1.5   0:00.19 /usr/sbin+
 27977 nobody    20   0  277884  35664   3888 S   0.0  1.5   0:00.24 /usr/sbin+
 28725 nobody    20   0  277732  35524   3936 S   0.0  1.5   0:00.07 /usr/sbin+
 28754 nobody    20   0  277768  35592   3956 S   0.0  1.5   0:00.08 /usr/sbin+
 28756 nobody    20   0  278120  35760   3832 S   0.0  1.5   0:00.09 /usr/sbin+
 28873 nobody    20   0  278136  35720   3912 S   0.0  1.5   0:00.08 /usr/sbin+
 28950 nobody    20   0  277972  35748   3932 S   0.0  1.5   0:00.09 /usr/sbin+
 29239 nobody    20   0  277608  35292   3820 S   0.0  1.5   0:00.07 /usr/sbin+
 29298 nobody    20   0  277388  34780   3624 S   0.0  1.4   0:00.01 /usr/sbin+
 29299 nobody    20   0  278084  35512   3852 S   0.0  1.5   0:00.05 /usr/sbin+
 29300 nobody    20   0  277780  35516   3876 S   0.0  1.5   0:00.05 /usr/sbin+
 29330 nobody    20   0  277552  35356   3948 S   0.0  1.5   0:00.04 /usr/sbin+
 29333 nobody    20   0  277688  35456   3888 S   0.0  1.5   0:00.07 /usr/sbin+
 29505 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 29891 root      20   0  111304   4376   3336 S   0.0  0.2   0:00.00 sshd: [ac+
 29892 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 29920 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 29921 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 29922 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.01 php-fpm: +
 29999 healtho+  20   0  457376  71456   4196 S   0.0  3.0   0:01.99 php-fpm: +
 30007 healtho+  20   0  457240  69968   4188 S   0.0  2.9   0:01.44 php-fpm: +
 30084 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 30087 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 30089 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30091 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30092 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30093 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30095 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30096 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30097 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30099 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30102 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 30103 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30104 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 30107 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30108 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30109 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30111 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30112 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30114 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 30116 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 30126 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 30137 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30139 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 30141 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30165 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 30170 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30171 nobody    20   0  277904  31816      0 R   0.0  1.3   0:00.00 /usr/sbin+
 75823 root      20   0  181668  28780   1368 S   0.0  1.2   0:05.54 lfd - sle+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root       4170  0.0  0.0      0     0 ?        S    00:44   0:00  \_ [kworker/1:3]
root       5625  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root      13980  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:2]
root      16501  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/1:0]
root      18269  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:1]
root      20589  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:3]
root      21629  0.0  0.0      0     0 ?        S    01:13   0:00  \_ [kworker/1:2]
root      24321  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:0]
root      26101  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/u200:1]
root      27739  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/1:1]
root      30170  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44416  3388 ?        Ss   Nov07   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  6528 ?        Ss   Nov07   0:13 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   212 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   892 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   120 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   400 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   276 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1332 ?        Ss   Nov07   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3356 ?        Ssl  Nov07   0:11 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6716 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1428 ?        Ss   Nov07   0:05 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      27095  0.0  0.0 183048  1596 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      27111  0.0  1.0 178152 25724 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      27154  0.0  0.6 158808 14808 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      27162  0.0  1.4 195364 34020 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      27185  0.0  0.6  76780 16516 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      30087  0.0  0.0 183080  2420 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30102  0.0  0.0 113284  1212 ?        Ss   01:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      30116  0.0  0.0 108052   356 ?        S    01:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      30126  0.0  0.0 113288  1520 ?        S    01:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      30172  0.0  0.0 153840  2100 ?        R    01:27   0:00  |               \_ ps auxf
root      30089  0.0  0.1 183080  2424 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30103  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      30091  0.0  0.0 183080  2420 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30112  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      30092  0.0  0.0 183080  2420 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30111  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      30093  0.0  0.0 183080  2416 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30109  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      30095  0.0  0.0 183080  2416 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30107  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      30096  0.0  0.0 183080  2416 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30108  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      30097  0.0  0.0 183080  2420 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30114  0.0  0.0  20164   968 ?        Ss   01:27   0:00  |   \_ jailshell (pactpay) [30137] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30137  0.0  0.0  20164   260 ?        S    01:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30139  0.0  0.7 476724 17484 ?        S    01:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      30099  0.0  0.0 183080  2416 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      30104  0.0  0.0  20164   968 ?        Ss   01:27   0:00      \_ jailshell (nigeria) [30141] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30141  0.0  0.0  20164   260 ?        S    01:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30146  0.0  0.6 400652 15936 ?        S    01:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3284 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.3 5654048 33324 ?       SLsl Nov07   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656   916 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   360 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  27925  0.0  0.1  46772  2812 ?        S    01:24   0:00  \_ dovecot/pop3-login
dovenull  27926  0.0  0.1  46780  2432 ?        S    01:24   0:00  \_ dovecot/imap-login
root      27927  0.0  0.0  10452  1080 ?        S    01:24   0:00  \_ dovecot/log
dovenull  27928  0.0  0.1  46772  3000 ?        S    01:24   0:00  \_ dovecot/pop3-login
dovenull  27929  0.0  0.1  47056  3136 ?        S    01:24   0:00  \_ dovecot/imap-login
root      27930  0.0  0.4  24396 11632 ?        S    01:24   0:00  \_ dovecot/config
dovecot   27931  0.0  0.0  13568  1092 ?        S    01:24   0:00  \_ dovecot/stats
dovecot   27932  0.0  0.0  41056  1724 ?        S    01:24   0:00  \_ dovecot/auth
root       1124  0.0  0.0 153404   272 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 12852 ?        Ssl  Nov07   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:03 /usr/sbin/sshd -D
root      29505  0.0  0.1 111304  4272 ?        Ss   01:26   0:00  \_ sshd: [accepted]
root      29891  0.0  0.1 111304  4376 ?        Ss   01:26   0:00  \_ sshd: [accepted]
sshd      29892  0.0  0.1 115644  2628 ?        S    01:26   0:00  |   \_ sshd: [net]
root      29920  0.0  0.1 111304  4448 ?        Ss   01:26   0:00  \_ sshd: [accepted]
sshd      29921  0.0  0.1 115644  2632 ?        S    01:26   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   29922  0.0  0.3 397064  8124 ?        S    01:26   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  29999 11.7  2.9 457376 71456 ?        S    01:26   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  30004 10.6  2.8 457240 70032 ?        S    01:26   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  30007  9.6  2.8 457240 69968 ?        S    01:26   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.7 436392 18944 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.2 290128  6728 ?        Ssl  Nov07   0:06 /usr/sbin/rsyslogd -n
root       1138  0.0  2.9 1763032 71956 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5672 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.7 858124 42708 ?        Ssl  Nov07   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  6848 ?        Ss   Nov07   0:06 cpsrvd (SSL) - waiting for connections                   
root      30084  0.0  0.0      0     0 ?        Z    01:26   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5456 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6320 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3432 ?        Rs   Nov07   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46788 ?        Ss   Nov07   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.9 269784 96268 ?        S    Nov07   0:03  \_ spamd child
root       5903  0.0  3.9 261484 94720 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3604 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.9 410480 22352 ?        Ss   Nov07   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  0.8 262224 21592 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209816  9852 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.6 228228 16336 ?        Ss   Nov07   0:00 dnsadmin - server mode
root       1844  0.0  0.0 299272   444 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1376 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.9 1458856 264572 ?      Sl   Nov07   9:12 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 266984 30416 ?        Ss   Nov07   0:01 /usr/sbin/httpd -k start
root      27916  0.0  0.0  12820  1264 ?        S    01:24   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      27917  0.0  0.0  12732  1272 ?        S    01:24   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      27918  0.0  0.0  12844  1272 ?        S    01:24   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      27919  0.0  0.4  53340 11428 ?        S    01:24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    27921  0.1  1.4 277904 35732 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    30171  0.0  0.1  71792  3740 ?        R    01:27   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    27922  0.1  1.4 277752 35696 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    27924  0.1  1.4 277748 35492 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    27952  0.1  1.4 277752 35556 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    27977  0.1  1.4 277884 35664 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    28725  0.0  1.4 277732 35524 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    28754  0.0  1.4 277768 35592 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    28756  0.0  1.4 278120 35760 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    28873  0.0  1.4 278136 35720 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    28950  0.1  1.4 277972 35748 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29239  0.1  1.4 277608 35292 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29270  0.0  1.4 278132 35684 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29298  0.0  1.4 277388 34780 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29299  0.0  1.4 278084 35512 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29300  0.0  1.4 277780 35516 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29330  0.0  1.4 277552 35356 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29333  0.1  1.4 277688 35456 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.1 181668 28780 ?        Ss   00:00   0:05 lfd - sleeping
root      14462  0.0  0.4 1341636 10176 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      14500  0.0  0.4 1277312 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 23814  Threads: 3  Questions: 4415151  Slow queries: 0  Opens: 7405  Flush tables: 1  Open tables: 2000  Queries per second avg: 185.401
*************************** 1. row ***************************
     Id: 62571
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 62575
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 62580
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.4.250.30 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.103 TIME_WAIT
      1 54.39.0.239 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 84.32.212.211 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 34.1.25.89 TIME_WAIT
     34 103.253.27.139 TIME_WAIT
     35 103.253.27.28 TIME_WAIT
     37 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 01:27:01 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 6 hours 36 minutes 49 seconds
   Server load: 1.52 1.12 0.85
   Total accesses: 119826 - Total Traffic: 2.0 GB - Total Duration: 61613291
   CPU Usage: u1.88 s1.94 cu1045.75 cs709.87 - 7.39% CPU load
   5.03 requests/sec - 88.4 kB/second - 17.6 kB/request - 514.19 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

..WK..__...RR..........._...W..._.K..._....._.RRK...._..K.......
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-1  -     0/0/6491  . 0.00 47   24  3399233 0.0   0.00  121.75 110.249.201.114 http/1.1
   1-2  -     0/0/6950  . 0.00 28   0   3662185 0.0   0.00  131.45 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-2  27952 0/63/6893 W 0.68 0    0   3539781 0.0   0.66  121.58 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-2  29239 1/16/6014 K 0.28 4    18  3148975 6.4   0.31  108.39 104.164.173.120 http/1.1 cloudware.ng:443           GET / HTTP/1.1
   4-2  -     0/0/6835  . 0.00 26   0   3301632 0.0   0.00  106.96 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-2  -     0/0/6286  . 0.00 25   0   3242167 0.0   0.00  111.26 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-2  27977 0/76/6293 _ 0.82 0    9   3331198 0.0   3.55  123.97 54.145.82.217   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Oru-east&state=Imo&ward=Awo-
   7-2  27922 0/75/5910 _ 0.77 0    287 3082647 0.0   0.85  106.18 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   8-1  -     0/0/5596  . 0.00 53   5   3085704 0.0   0.00  94.22  102.90.98.148   http/1.1
   9-2  -     0/0/5584  . 0.00 59   0   2963686 0.0   0.00  92.83  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-2 -     0/0/5384  . 0.00 34   0   2836284 0.0   0.00  106.85 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-2 27924 0/55/5534 R 0.62 51   82  2668994 0.0   0.68  84.87  102.90.98.148   http/1.1
   12-2 29270 0/21/4984 R 0.15 3    284 2436925 0.0   0.20  76.37  104.164.126.128 http/1.1 cloudware.ng:443
   13-2 -     0/0/3730  . 0.00 43   0   1990630 0.0   0.00  61.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-2 -     0/0/3521  . 0.00 58   0   1744840 0.0   0.00  54.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-2 -     0/0/3917  . 0.00 40   0   1936172 0.0   0.00  62.81  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-2 -     0/0/3705  . 0.00 41   0   1913127 0.0   0.00  61.35  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-2 -     0/0/3426  . 0.00 49   0   1775610 0.0   0.00  53.87  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 -     0/0/2013  . 0.00 20   0   1263804 0.0   0.00  30.64  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-2 -     0/0/1928  . 0.00 46   0   1202949 0.0   0.00  29.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 -     0/0/1735  . 0.00 21   0   949968  0.0   0.00  27.66  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 -     0/0/1677  . 0.00 48   0   954287  0.0   0.00  26.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 -     0/0/1634  . 0.00 60   0   884923  0.0   0.00  27.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 -     0/0/382   . 0.00 50   0   182124  0.0   0.00  6.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 28725 0/38/1609 _ 0.10 1    1   870933  0.0   0.14  31.96  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   25-2 -     0/0/1708  . 0.00 37   0   732961  0.0   0.00  26.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/947   . 0.00 56   0   513822  0.0   0.00  19.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/346   . 0.00 36   0   135789  0.0   0.00  3.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 27921 4/84/642  W 1.05 0    0   221604  126.1 1.22  8.77   66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4248291951 HTTP/1.1
   29-2 -     0/0/171   . 0.00 51   0   59130   0.0   0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/123   . 0.00 54   0   43396   0.0   0.00  1.89   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/612   . 0.00 39   0   305303  0.0   0.00  14.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 28754 0/44/64   _ 0.14 0    291 29513   0.0   0.46  0.74   103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   33-2 -     0/0/41    . 0.00 42   0   5107    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 28756 3/40/97   K 0.30 3    296 44526   93.3  0.36  1.30   66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2417027825 HTTP/1.1
   35-2 -     0/0/33    . 0.00 52   0   4924    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/268   . 0.00 55   0   137797  0.0   0.00  4.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/96    . 0.00 31   0   44372   0.0   0.00  1.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 28873 0/39/48   _ 0.18 0    18  17183   0.0   0.27  0.35   ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   39-2 -     0/0/51    . 0.00 62   0   22615   0.0   0.00  0.65   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/60    . 0.00 27   0   25287   0.0   0.00  0.57   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/38    . 0.00 38   0   11904   0.0   0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/337   . 0.00 44   0   154508  0.0   0.00  4.48   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/1849  . 0.00 29   0   792353  0.0   0.00  30.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 28950 0/41/48   _ 0.21 0    358 9623    0.0   0.31  0.35   66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2914821135 HTTP/1.1
   45-2 -     0/0/204   . 0.00 53   0   99186   0.0   0.00  2.83   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 29298 0/6/14    R 0.01 51   593 2052    0.0   0.06  0.12   102.90.98.148   http/1.1
   47-2 29299 0/23/40   R 0.13 3    6   16115   0.0   0.14  0.29   104.164.126.63  http/1.1 cloudware.ng:443
   48-2 29300 1/23/343  K 0.06 1    291 130896  31.5  0.20  4.00   66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=324214589 HTTP/1.1
   49-2 -     0/0/16    . 0.00 61   0   5601    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69    . 0.00 35   0   32068   0.0   0.00  1.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94    . 0.00 47   0   46144   0.0   0.00  1.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24    . 0.00 45   0   7231    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 29330 0/21/878  _ 0.15 0    422 416707  0.0   0.10  15.98  103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   54-2 -     0/0/220   . 0.00 57   0   104301  0.0   0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20    . 0.00 30   0   5450    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 29333 2/21/34   K 0.24 1    267 15610   61.9  0.29  0.37   66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=14264306 HTTP/1.1
   57-1 -     0/0/18    . 0.00 906  0   7494    0.0   0.00  0.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61    . 0.00 741  0   26486   0.0   0.00  0.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67    . 0.00 965  0   37042   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14    . 0.00 923  0   4755    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18    . 0.00 969  0   8011    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13    . 0.00 945  0   3968    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234   . 0.00 930  0   126089  0.0   0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570   . 0.00 924  0   196325  0.0   0.00  9.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249   . 0.00 53   282 111456  0.0   0.00  3.97   102.90.98.148   http/1.1
   66-1 -     0/0/234   . 0.00 932  0   130247  0.0   0.00  4.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13    . 0.00 964  0   4952    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13    . 0.00 918  0   5501    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9     . 0.00 935  0   4783    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16    . 0.00 950  0   9834    0.0   0.00  0.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10    . 0.00 944  0   3804    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6     . 0.00 952  0   1625    0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11    . 0.00 908  0   3678    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10    . 0.00 926  0   5547    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7     . 0.00 927  0   2381    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7     . 0.00 953  0   3573    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675   . 0.00 922  0   351530  0.0   0.00  15.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2     . 0.00 8536 0   641     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3     . 0.00 8524 0   1675    0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1087
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 159 seconds, (range: 132...204)
   index usage: 19%, cache usage: 25%
   total entries stored since starting: 1087
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit