403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-08.01.30 load[0] mem[57/76] mysql[4/12] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1302          79          66         981         827
Swap:          1999        1566         433
 01:30:02 up  6:40,  0 users,  load average: 0.45, 0.84, 0.79
## system overview
top - 01:30:02 up  6:40,  0 users,  load average: 0.45, 0.84, 0.79
Tasks: 206 total,   4 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.5 us, 12.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    90560 free,  1324880 used,  1004860 buff/cache
KiB Swap:  2047996 total,   444412 free,  1603584 used.   856740 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 265144   2992 S 106.2 11.0   9:16.93 /usr/sbin+
 31659 healtho+  20   0  457240  70040   4196 R  50.0  2.9   0:02.07 php-fpm: +
 31812 nigeria   20   0  400652  15932  10220 S  18.8  0.7   0:00.08 /opt/cpan+
 18269 root      20   0       0      0      0 S   6.2  0.0   0:00.09 [kworker/+
 31275 nobody    20   0  277960  35296   3616 S   6.2  1.5   0:00.06 /usr/sbin+
     1 root      20   0   44416   3428   1480 S   0.0  0.1   0:34.44 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.82 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.45 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:29.76 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.44 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.08 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.07 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.64 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.02 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.29 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   7048   6796 S   0.0  0.3   0:13.71 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    212     92 S   0.0  0.0   0:02.30 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    888    492 S   0.0  0.0   0:03.16 /usr/lib/+
   486 root      20   0  152780    120     76 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    400    292 S   0.0  0.0   0:00.55 /usr/sbin+
   495 root      20   0   52852    276    164 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1332    624 S   0.0  0.1   0:12.43 /usr/bin/+
   501 nscd      20   0  994492   3404    672 S   0.0  0.1   0:11.43 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6944   1884 S   0.0  0.3   0:00.34 queueproc+
   536 root      20   0   24896   1428    816 S   0.0  0.1   0:05.50 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.67 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3348    340 S   0.0  0.1   0:00.39 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.28 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.07 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  37544   5768 S   0.0  1.6   0:13.09 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1252    860 S   0.0  0.1   0:00.31 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.52 pure-ftpd+
  1126 systuser  20   0  114016  12852   2320 S   0.0  0.5   0:05.41 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:03.44 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.51 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:06.08 php-fpm: +
  1134 root      20   0  436392  18944  11440 S   0.0  0.8   0:00.82 php-fpm: +
  1135 root      20   0  290128   7176   6176 S   0.0  0.3   0:07.01 /usr/sbin+
  1138 root      20   0 1763032  72184    376 S   0.0  3.0   0:14.01 /usr/loca+
  1162 root      20   0  385496   5672    636 S   0.0  0.2   0:00.71 php-fpm: +
  1168 named     20   0  858124  43712   1448 S   0.0  1.8   0:12.94 /usr/sbin+
  1170 root      20   0  261688   6852   1432 S   0.0  0.3   0:06.37 cpsrvd (S+
  1179 root      20   0  386112   5456    832 S   0.0  0.2   0:00.69 php-fpm: +
  1191 root      20   0  392856   6320    724 S   0.0  0.3   0:00.68 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3432   2212 S   0.0  0.1   0:19.86 /usr/loca+
  1280 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.08 dovecot/a+
  1350 root      20   0  248084  46788    892 S   0.0  1.9   0:05.64 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.11 SonarPush+
  1413 wp-tool+  20   0  387556   3604   1364 S   0.0  0.1   0:00.26 /usr/bin/+
  1414 wp-tool+  20   0  410480  22352   1476 S   0.0  0.9   0:19.63 /usr/bin/+
  1430 root      20   0  262224  21592   3736 S   0.0  0.9   0:03.46 cpdavd - +
  1435 root      20   0  209816  10056   1708 S   0.0  0.4   0:02.26 tailwatchd
  1436 root      20   0  228228  16456   3608 S   0.0  0.7   0:00.46 dnsadmin +
  1844 root      20   0  299272    508    348 S   0.0  0.0   0:00.63 php-fpm: +
  1905 root      38  18  130416   1376    692 S   0.0  0.1   0:00.05 cpanellog+
  2132 root      20   0  267108  32200   6608 S   0.0  1.3   0:02.09 /usr/sbin+
  4170 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5625 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5902 root      20   0  269784  96524   1388 S   0.0  4.0   0:03.64 spamd chi+
  5903 root      20   0  261484  94720    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.44 [kworker]
 13861 root      20   0  183048   1060    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 13980 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 14462 root      20   0 1341636  10176    332 S   0.0  0.4   0:00.07 /usr/bin/+
 14500 root      20   0 1277312  11532    332 S   0.0  0.5   0:00.06 /usr/bin/+
 16501 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20589 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 26101 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 27095 root      20   0  183048   1596   1060 S   0.0  0.1   0:00.00 /usr/sbin+
 27111 root      20   0  178152  25724   2236 S   0.0  1.1   0:00.13 /usr/loca+
 27154 root      20   0  158816  14808   2216 S   0.0  0.6   0:00.08 /usr/loca+
 27162 root      20   0  195364  34020   2480 S   0.0  1.4   0:00.21 /usr/loca+
 27185 root      20   0   76780  16524   2556 S   0.0  0.7   0:00.18 /usr/loca+
 27739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30170 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30665 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30837 root      20   0   12772   1304   1124 S   0.0  0.1   0:00.00 /usr/loca+
 30838 root      20   0   12732   1308   1128 S   0.0  0.1   0:00.00 /usr/loca+
 30839 root      20   0   12780   1308   1128 S   0.0  0.1   0:00.00 /usr/loca+
 30841 dovenull  20   0   46772   3580   2736 S   0.0  0.1   0:00.00 dovecot/p+
 30842 dovenull  20   0   46780   3592   2740 S   0.0  0.1   0:00.00 dovecot/i+
 30844 root      20   0   10452   1528   1156 S   0.0  0.1   0:00.00 dovecot/l+
 30845 dovenull  20   0   46772   3584   2736 S   0.0  0.1   0:00.00 dovecot/p+
 30846 dovenull  20   0   46780   3592   2740 S   0.0  0.1   0:00.00 dovecot/i+
 30847 root      20   0   24528  12316   1484 S   0.0  0.5   0:00.01 dovecot/c+
 30848 dovecot   20   0   13568   1568   1300 S   0.0  0.1   0:00.00 dovecot/s+
 30849 dovecot   20   0   41056   2916   2180 S   0.0  0.1   0:00.00 dovecot/a+
 30851 root      20   0   53252  11908   2532 S   0.0  0.5   0:00.05 /usr/loca+
 30852 nobody    20   0  277632  35148   3608 S   0.0  1.5   0:00.21 /usr/sbin+
 30853 nobody    20   0  277612  35212   3692 S   0.0  1.5   0:00.13 /usr/sbin+
 30854 nobody    20   0  277620  35132   3604 S   0.0  1.5   0:00.19 /usr/sbin+
 30855 nobody    20   0  277752  35372   3740 S   0.0  1.5   0:00.15 /usr/sbin+
 30856 nobody    20   0  277960  35340   3652 S   0.0  1.5   0:00.16 /usr/sbin+
 30868 nobody    20   0  277632  35144   3604 S   0.0  1.5   0:00.13 /usr/sbin+
 30885 nobody    20   0  277612  35304   3784 R   0.0  1.5   0:00.14 /usr/sbin+
 30900 nobody    20   0  277612  35020   3500 S   0.0  1.4   0:00.14 /usr/sbin+
 30907 nobody    20   0  277920  35316   3680 S   0.0  1.5   0:00.12 /usr/sbin+
 30912 nobody    20   0  277952  35384   3704 S   0.0  1.5   0:00.12 /usr/sbin+
 30923 nobody    20   0  277632  35168   3624 S   0.0  1.5   0:00.14 /usr/sbin+
 31094 nobody    20   0  277952  35256   3580 S   0.0  1.5   0:00.08 /usr/sbin+
 31215 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31270 nobody    20   0  277604  35128   3616 S   0.0  1.5   0:00.06 /usr/sbin+
 31431 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
 31474 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
 31514 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 31561 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 31569 root      20   0   41052   2800   2136 S   0.0  0.1   0:00.00 dovecot/a+
 31663 healtho+  20   0  457240  70028   4188 S   0.0  2.9   0:02.00 php-fpm: +
 31724 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 31732 root      20   0  183084   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31735 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31736 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31738 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31739 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31741 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31742 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31743 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31744 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31746 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31749 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31750 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31752 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31760 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 31765 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 31769 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 31773 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 31774 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31775 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31776 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 31777 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31778 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31780 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 31781 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 31784 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 31786 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31788 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 31790 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 31791 root      20   0  188212  11088   5148 S   0.0  0.5   0:00.02 /usr/loca+
 31801 root      20   0  113284   1476   1256 S   0.0  0.1   0:00.00 bash /usr+
 31803 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 31804 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 31811 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 31842 root      20   0  160224   2348   1636 S   0.0  0.1   0:00.01 top -n 2 +
 31860 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 31864 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
 31870 cloudsms  20   0  400652  15148   9844 S   0.0  0.6   0:00.00 /opt/cpan+
 31898 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 31912 root      20   0  113284    224      0 R   0.0  0.0   0:00.00 bash /usr+
 75823 root      20   0  181668  28780   1368 S   0.0  1.2   0:05.71 lfd - sle+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root       4170  0.0  0.0      0     0 ?        S    00:44   0:00  \_ [kworker/1:3]
root       5625  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:0]
root      13980  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:2]
root      16501  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/1:0]
root      18269  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:1]
root      20589  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:3]
root      26101  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/u200:1]
root      27739  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/1:1]
root      30170  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root      30665  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:0]
root      31215  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:2]
root      31251  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44416  3428 ?        Ss   Nov07   0:34 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  7048 ?        Ss   Nov07   0:13 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   212 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   888 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   120 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   400 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   276 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1332 ?        Ss   Nov07   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3404 ?        Ssl  Nov07   0:11 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6944 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1428 ?        Ss   Nov07   0:05 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      27095  0.0  0.0 183048  1596 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      27111  0.0  1.0 178152 25724 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      27154  0.0  0.6 158816 14808 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      27162  0.0  1.4 195364 34020 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      27185  0.0  0.6  76780 16524 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      31732  0.0  0.1 183084  2424 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31784  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      31801  0.0  0.0 114252  2232 ?        R    01:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      31735  0.0  0.1 183080  2428 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31760  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      31765  0.0  0.0 108052   360 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      31769  0.0  0.0 113288  1512 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      31913  0.0  0.0 153840  2092 ?        R    01:30   0:00  |               \_ ps auxf
root      31736  0.0  0.1 183080  2428 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31786  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      31738  0.0  0.1 183080  2428 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31788  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      31739  0.0  0.1 183080  2428 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31774  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      31741  0.0  0.1 183080  2428 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31790  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      31742  0.0  0.1 183080  2428 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31775  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      31743  0.0  0.1 183080  2428 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31777  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      31744  0.0  0.1 183080  2424 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31773  0.0  0.0  20164   988 ?        Ss   01:30   0:00  |   \_ jailshell (cloudsms) [31860] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  31860  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  31864  0.0  0.0 113284  1208 ?        S    01:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  31870  0.0  0.6 400652 15148 ?        S    01:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      31746  0.0  0.1 183080  2424 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31778  0.0  0.0  20164   992 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      31916  0.0  0.0  20164   264 ?        R    01:30   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      31749  0.0  0.0 183080  2420 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31776  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      31791  2.0  0.4 188212 11088 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      31842  0.0  0.0 160224  2348 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root      31750  0.0  0.0 183080  2420 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31781  0.0  0.0  20164   968 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [31803] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   31803  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   31811  2.0  0.7 476724 17484 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      31752  0.0  0.0 183080  2420 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      31780  0.0  0.0  20164   972 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [31804] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   31804  0.0  0.0  20164   260 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   31812  8.0  0.6 400652 15932 ?        S    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3348 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.5 5654048 37544 ?       SLsl Nov07   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1252 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   360 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46772  3580 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.1  46780  3592 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1528 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46772  3584 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.1  46780  3592 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24528 12316 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1568 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2916 ?        S    01:28   0:00  \_ dovecot/auth
root      31561  0.0  0.1  60820  4508 ?        S    01:29   0:00  \_ dovecot/lmtp
root      31569  0.0  0.1  41052  2800 ?        S    01:29   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 12852 ?        Ssl  Nov07   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:03 /usr/sbin/sshd -D
root      31514  0.0  0.1 111304  4268 ?        Ss   01:29   0:00  \_ sshd: [accepted]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   31431  0.0  0.3 397064  8124 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   31474  0.0  0.3 397064  8124 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  31659 17.3  2.8 457240 70040 ?        R    01:29   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  31663 18.1  2.8 457240 70028 ?        S    01:29   0:02  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.7 436392 18944 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.2 290128  7176 ?        Ssl  Nov07   0:07 /usr/sbin/rsyslogd -n
root       1138  0.0  2.9 1763032 72184 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5672 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.8 858124 43712 ?        Ssl  Nov07   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  6852 ?        Ss   Nov07   0:06 cpsrvd (SSL) - waiting for connections                   
root      31724  0.0  0.0      0     0 ?        Z    01:29   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5456 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6320 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3432 ?        Rs   Nov07   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46788 ?        Ss   Nov07   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.9 269784 96524 ?        S    Nov07   0:03  \_ spamd child
root       5903  0.0  3.9 261484 94720 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3604 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.9 410480 22352 ?        Ss   Nov07   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  0.8 262224 21592 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209816 10056 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.6 228228 16456 ?        Ss   Nov07   0:00 dnsadmin - server mode
root       1844  0.0  0.0 299272   508 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1376 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.9 1458856 265144 ?      Sl   Nov07   9:16 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.3 267108 32200 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12772  1304 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1308 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12780  1308 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11908 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    30852  0.1  1.4 277632 35148 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30853  0.1  1.4 277612 35212 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30854  0.1  1.4 277620 35132 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30855  0.1  1.4 277752 35372 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30856  0.1  1.4 277960 35340 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30868  0.1  1.4 277632 35144 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30885  0.1  1.4 277612 35304 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
root      31915  0.0  0.0   6516   412 ?        R    01:30   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php70
nobody    30900  0.1  1.4 277612 35020 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30907  0.1  1.4 277920 35316 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30912  0.1  1.4 277952 35384 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    30923  0.1  1.4 277632 35168 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    31094  0.1  1.4 277952 35256 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    31270  0.1  1.4 277604 35128 ?        S    01:29   0:00  \_ /usr/sbin/httpd -k start
nobody    31275  0.1  1.4 277960 35296 ?        S    01:29   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.1 181668 28780 ?        Ss   00:00   0:05 lfd - sleeping
root      14462  0.0  0.4 1341636 10176 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      14500  0.0  0.4 1277312 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 23995  Threads: 4  Questions: 4449274  Slow queries: 0  Opens: 7479  Flush tables: 1  Open tables: 2000  Queries per second avg: 185.425
*************************** 1. row ***************************
     Id: 62993
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 62995
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 63002
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 63005
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.202 TIME_WAIT
      1 114.119.133.34 TIME_WAIT
      1 142.147.183.11 TIME_WAIT
      1 170.23.23.166 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.168.30 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 146.70.185.32 TIME_WAIT
     33 103.253.27.28 TIME_WAIT
     36 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 01:30:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 6 hours 39 minutes 50 seconds
   Server load: 0.45 0.84 0.79
   Total accesses: 120583 - Total Traffic: 2.0 GB - Total Duration: 61973545
   CPU Usage: u1.97 s1.94 cu1053.24 cs714.85 - 7.39% CPU load
   5.03 requests/sec - 88.3 kB/second - 17.6 kB/request - 513.949 ms/request
   6 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_W__W_K_K_W.................K..._._.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-3  30868 0/29/6541  _ 0.74 0    6   3428660 0.0   0.55  122.81 100.28.118.16  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/assets/js/assets/css/blog/b
   1-3  30885 3/32/6984  W 0.71 0    0   3683103 93.4  0.60  132.12 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=13052207 HTTP/1.1
   2-3  30900 0/35/6952  _ 0.43 1    6   3566510 0.0   0.53  122.70 44.213.202.136 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ika%20-%20south&state=Delta&
   3-3  30907 0/30/6065  _ 0.32 1    400 3176919 0.0   0.44  109.18 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2851936503 HTTP/1.1
   4-3  30912 0/32/6867  W 0.38 0    0   3317777 0.0   0.48  107.44 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-3  30923 0/32/6318  _ 0.46 0    0   3256443 0.0   0.55  111.80 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-3  30854 12/40/6353 K 0.72 0    548 3363140 376.8 0.84  125.19 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3901258023 HTTP/1.1
   7-3  30853 0/30/5961  _ 0.42 0    336 3103378 0.0   0.54  106.98 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2690175063 HTTP/1.1
   8-3  31094 2/16/5612  K 0.31 3    410 3095422 64.1  0.38  94.60  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2808249852 HTTP/1.1
   9-3  31270 0/18/5602  _ 0.19 0    694 2971437 0.0   0.24  93.08  103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-3 31275 0/16/5400  W 0.13 0    0   2842317 0.0   0.18  107.03 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   11-2 -     0/0/5534   . 0.00 106  82  2668994 0.0   0.00  84.87  102.90.98.148  http/1.1
   12-2 -     0/0/5003   . 0.00 126  0   2442574 0.0   0.00  76.61  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-2 -     0/0/3730   . 0.00 224  0   1990630 0.0   0.00  61.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-2 -     0/0/3521   . 0.00 239  0   1744840 0.0   0.00  54.52  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-2 -     0/0/3917   . 0.00 221  0   1936172 0.0   0.00  62.81  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-2 -     0/0/3705   . 0.00 222  0   1913127 0.0   0.00  61.35  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-2 -     0/0/3426   . 0.00 230  0   1775610 0.0   0.00  53.87  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 -     0/0/2013   . 0.00 201  0   1263804 0.0   0.00  30.64  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-2 -     0/0/1928   . 0.00 227  0   1202949 0.0   0.00  29.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 -     0/0/1735   . 0.00 202  0   949968  0.0   0.00  27.66  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 -     0/0/1677   . 0.00 229  0   954287  0.0   0.00  26.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 -     0/0/1634   . 0.00 241  0   884923  0.0   0.00  27.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 -     0/0/382    . 0.00 231  0   182124  0.0   0.00  6.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/1633   . 0.00 104  268 882363  0.0   0.00  32.38  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=566712460 HTTP/1.1
   25-2 -     0/0/1708   . 0.00 218  0   732961  0.0   0.00  26.22  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/947    . 0.00 237  0   513822  0.0   0.00  19.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/346    . 0.00 217  0   135789  0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 30852 1/42/706   K 0.82 1    396 255332  30.8  0.90  10.01  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2128831040 HTTP/1.1
   29-2 -     0/0/171    . 0.00 232  0   59130   0.0   0.00  2.95   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/123    . 0.00 235  0   43396   0.0   0.00  1.89   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/612    . 0.00 220  0   305303  0.0   0.00  14.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 30855 0/35/117   _ 0.48 1    290 53695   0.0   0.56  1.49   103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   33-2 -     0/0/41     . 0.00 223  0   5107    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 30856 0/53/168   _ 0.45 0    0   68932   0.0   0.69  2.27   127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   35-2 -     0/0/33     . 0.00 233  0   4924    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/268    . 0.00 236  0   137797  0.0   0.00  4.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/96     . 0.00 211  0   44372   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/69     . 0.00 107  293 27449   0.0   0.00  0.64   103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   39-2 -     0/0/51     . 0.00 243  0   22615   0.0   0.00  0.65   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/60     . 0.00 207  0   25287   0.0   0.00  0.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/38     . 0.00 219  0   11904   0.0   0.00  0.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/337    . 0.00 225  0   154508  0.0   0.00  4.48   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/1849   . 0.00 209  0   792353  0.0   0.00  30.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/69     . 0.00 108  286 19484   0.0   0.00  0.69   103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   45-2 -     0/0/204    . 0.00 234  0   99186   0.0   0.00  2.83   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/14     . 0.00 106  593 2052    0.0   0.00  0.12   102.90.98.148  http/1.1
   47-2 -     0/0/60     . 0.00 107  298 23415   0.0   0.00  0.56   103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   48-2 -     0/0/345    . 0.00 170  0   131502  0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16     . 0.00 242  0   5601    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69     . 0.00 216  0   32068   0.0   0.00  1.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94     . 0.00 228  0   46144   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24     . 0.00 226  0   7231    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902    . 0.00 106  356 427396  0.0   0.00  16.37  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220    . 0.00 238  0   104301  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20     . 0.00 210  0   5450    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53     . 0.00 104  352 26129   0.0   0.00  0.72   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18     . 0.00 1087 0   7494    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00 922  0   26486   0.0   0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00 1146 0   37042   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00 1104 0   4755    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00 1150 0   8011    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00 1126 0   3968    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00 1111 0   126089  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00 1105 0   196325  0.0   0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249    . 0.00 234  282 111456  0.0   0.00  3.97   102.90.98.148  http/1.1
   66-1 -     0/0/234    . 0.00 1113 0   130247  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00 1145 0   4952    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00 1099 0   5501    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00 1116 0   4783    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00 1131 0   9834    0.0   0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00 1125 0   3804    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00 1133 0   1625    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00 1089 0   3678    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00 1107 0   5547    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00 1108 0   2381    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00 1134 0   3573    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00 1103 0   351530  0.0   0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 8717 0   641     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00 8705 0   1675    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 111
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 225 seconds, (range: 191...279)
   index usage: 1%, cache usage: 2%
   total entries stored since starting: 111
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit