403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.01.54.txt
 ## swap threshold exceeded
## server overview
2025-11-08.01.54 load[0] mem[52/77] mysql[1/12] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1186         172          71        1004         939
Swap:          1999        1586         413
 01:54:01 up  7:04,  0 users,  load average: 0.40, 0.51, 0.64
## system overview
top - 01:54:01 up  7:04,  0 users,  load average: 0.40, 0.51, 0.64
Tasks: 199 total,   2 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 20.0 sy,  0.0 ni, 30.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   164104 free,  1228040 used,  1028156 buff/cache
KiB Swap:  2047996 total,   423608 free,  1624388 used.   948788 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 252256   3820 S  60.0 10.4   9:48.29 /usr/sbin+
 45019 nigeria   20   0  400652  15936  10220 S  26.7  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44416   3472   1524 S   6.7  0.1   0:36.15 /usr/lib/+
   358 root      20   0   40244   4088   3836 S   6.7  0.2   0:14.51 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.94 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:31.47 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.31 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.39 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.71 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.09 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.36 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    504    376 S   0.0  0.0   0:02.43 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    872    492 S   0.0  0.0   0:03.34 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    400    292 S   0.0  0.0   0:00.57 /usr/sbin+
   495 root      20   0   52852    276    164 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1320    624 S   0.0  0.1   0:13.14 /usr/bin/+
   501 nscd      20   0  994492   3436    720 S   0.0  0.1   0:12.14 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6736   1704 S   0.0  0.3   0:00.36 queueproc+
   536 root      20   0   24896   1404    816 S   0.0  0.1   0:05.80 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.71 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3404    396 S   0.0  0.1   0:00.39 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.29 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.19 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  36296   6056 S   0.0  1.5   0:13.86 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1240    848 S   0.0  0.1   0:00.32 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.55 pure-ftpd+
  1126 systuser  20   0  114016  13480   2988 S   0.0  0.6   0:05.73 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:03.63 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.53 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:06.41 php-fpm: +
  1134 root      20   0  436392  19064  11560 S   0.0  0.8   0:00.86 php-fpm: +
  1135 root      20   0  298320   4672   3692 S   0.0  0.2   0:07.46 /usr/sbin+
  1138 root      20   0 1763032  72164    376 S   0.0  3.0   0:14.01 /usr/loca+
  1162 root      20   0  385496   5928    892 S   0.0  0.2   0:00.74 php-fpm: +
  1168 named     20   0  858124  44156   1596 S   0.0  1.8   0:13.89 /usr/sbin+
  1170 root      20   0  261688   7260   1828 S   0.0  0.3   0:06.54 cpsrvd (S+
  1179 root      20   0  386112   5572    948 S   0.0  0.2   0:00.72 php-fpm: +
  1191 root      20   0  392856   6268    672 S   0.0  0.3   0:00.71 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3432   2212 R   0.0  0.1   0:21.01 /usr/loca+
  1280 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.08 dovecot/a+
  1350 root      20   0  248084  46496    892 S   0.0  1.9   0:05.81 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.11 SonarPush+
  1413 wp-tool+  20   0  387556   3260   1364 S   0.0  0.1   0:00.27 /usr/bin/+
  1414 wp-tool+  20   0  410480  20340   1476 S   0.0  0.8   0:20.79 /usr/bin/+
  1430 root      20   0  262228  24616   6760 S   0.0  1.0   0:03.56 cpdavd - +
  1435 root      20   0  209816  10412   2012 S   0.0  0.4   0:02.38 tailwatchd
  1436 root      20   0  167452   4256   2888 S   0.0  0.2   0:00.48 dnsadmin +
  1844 root      20   0  299272    524    364 S   0.0  0.0   0:00.68 php-fpm: +
  1905 root      38  18  130416   1388    704 S   0.0  0.1   0:00.06 cpanellog+
  2132 root      20   0  267108  31436   5844 S   0.0  1.3   0:02.19 /usr/sbin+
  5902 root      20   0  269784  96212   1388 S   0.0  4.0   0:03.74 spamd chi+
  5903 root      20   0  261484  94544    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.46 [kworker]
 13861 root      20   0  183048   1060    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 14462 root      20   0 1415368  10176    332 S   0.0  0.4   0:00.08 /usr/bin/+
 14500 root      20   0 1277312  11532    332 S   0.0  0.5   0:00.06 /usr/bin/+
 20589 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 26101 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 30170 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 30837 root      20   0   12816   1412   1204 S   0.0  0.1   0:00.15 /usr/loca+
 30838 root      20   0   12732   1388   1204 S   0.0  0.1   0:00.13 /usr/loca+
 30839 root      20   0   12844   1420   1204 S   0.0  0.1   0:00.14 /usr/loca+
 30841 dovenull  20   0   46912   4100   3112 S   0.0  0.2   0:00.02 dovecot/p+
 30842 dovenull  20   0   47332   4788   3604 S   0.0  0.2   0:00.03 dovecot/i+
 30844 root      20   0   10452   1524   1152 S   0.0  0.1   0:00.02 dovecot/l+
 30845 dovenull  20   0   46912   4632   3552 S   0.0  0.2   0:00.03 dovecot/p+
 30846 dovenull  20   0   47104   4812   3624 S   0.0  0.2   0:00.02 dovecot/i+
 30847 root      20   0   24528  12248   1416 S   0.0  0.5   0:00.02 dovecot/c+
 30848 dovecot   20   0   13568   1536   1268 S   0.0  0.1   0:00.00 dovecot/s+
 30849 dovecot   20   0   41056   2916   2180 S   0.0  0.1   0:00.02 dovecot/a+
 30851 root      20   0   53252  11904   2528 S   0.0  0.5   0:00.05 /usr/loca+
 31215 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31270 nobody    20   0  277680  36312   4716 S   0.0  1.5   0:01.72 /usr/sbin+
 37099 nobody    20   0  277732  36056   4396 S   0.0  1.5   0:01.01 /usr/sbin+
 37296 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 37462 nobody    20   0  277732  36228   4580 S   0.0  1.5   0:01.15 /usr/sbin+
 37713 nobody    20   0  277680  36136   4520 S   0.0  1.5   0:00.95 /usr/sbin+
 37714 nobody    20   0  277996  36204   4352 S   0.0  1.5   0:01.27 /usr/sbin+
 37719 nobody    20   0  277688  36164   4548 S   0.0  1.5   0:01.00 /usr/sbin+
 39346 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39949 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 40004 nobody    20   0  277960  36284   4436 S   0.0  1.5   0:00.67 /usr/sbin+
 40684 nobody    20   0  277960  35888   4196 S   0.0  1.5   0:00.49 /usr/sbin+
 40908 nobody    20   0  277612  35764   4240 S   0.0  1.5   0:00.49 /usr/sbin+
 41737 nobody    20   0  277604  35432   3920 S   0.0  1.5   0:00.54 /usr/sbin+
 42195 nobody    20   0  277632  35704   4164 S   0.0  1.5   0:00.40 /usr/sbin+
 43208 nobody    20   0  277604  35364   3852 S   0.0  1.5   0:00.20 /usr/sbin+
 43484 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 43571 nobody    20   0  277632  35352   3808 S   0.0  1.5   0:00.30 /usr/sbin+
 44039 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44070 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44325 nobody    20   0  277604  35240   3712 S   0.0  1.5   0:00.06 /usr/sbin+
 44547 nobody    20   0  277600  35116   3608 S   0.0  1.5   0:00.06 /usr/sbin+
 44639 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 44742 healtho+  20   0  459288  72096   4208 S   0.0  3.0   0:05.07 php-fpm: +
 44754 healtho+  20   0  459288  72072   4184 S   0.0  3.0   0:04.54 php-fpm: +
 44815 cloudsms  20   0   62068   6564   4488 S   0.0  0.3   0:00.02 dovecot/l+
 44816 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 44858 nigeria   20   0  397784  11504   3900 S   0.0  0.5   0:00.18 php-fpm: +
 44878 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 44920 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 44921 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 44926 root      20   0  162436   5828   4332 S   0.0  0.2   0:00.01 sshd: roo+
 44927 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 44935 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 44943 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 44944 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44945 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44946 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44947 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44948 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44949 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44950 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44951 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44953 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44954 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44955 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 44957 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44960 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 44961 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 44962 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 44981 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44982 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 44983 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44984 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 44985 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44987 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44989 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44990 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44991 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44992 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44994 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44996 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45004 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 45005 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 45010 pactpay   20   0  476724  17116  11408 S   0.0  0.7   0:00.01 /opt/cpan+
 45013 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 45015 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 75823 root      20   0  181772  28888   1368 S   0.0  1.2   0:07.21 lfd - sle+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov07   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      20589  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:3]
root      26101  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/u200:1]
root      30170  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root      31215  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:2]
root      31251  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:4]
root      37296  0.0  0.0      0     0 ?        S    01:40   0:00  \_ [kworker/0:0]
root      39346  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/1:0]
root      39949  0.0  0.0      0     0 ?        S    01:45   0:00  \_ [kworker/0:1]
root      43484  0.0  0.0      0     0 ?        S    01:51   0:00  \_ [kworker/0:2]
root      44039  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:4]
root      44070  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44416  3472 ?        Ss   Nov07   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4088 ?        Ss   Nov07   0:14 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   504 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   872 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   400 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   276 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1320 ?        Ss   Nov07   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3436 ?        Ssl  Nov07   0:12 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6736 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1404 ?        Ss   Nov07   0:05 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      44943  0.0  0.0 183080  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44960  0.0  0.0 113284  1208 ?        Ss   01:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      44961  0.0  0.0 108052   356 ?        S    01:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      44962  0.0  0.0 113288  1516 ?        S    01:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      45024  0.0  0.0 153840  2088 ?        R    01:54   0:00  |               \_ ps auxf
root      44944  0.0  0.1 183080  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44994  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      44945  0.0  0.1 183080  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44989  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      44946  0.0  0.1 183080  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44981  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      44947  0.0  0.1 183080  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44996  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      44948  0.0  0.1 183080  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44991  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      44949  0.0  0.0 183080  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44985  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      44950  0.0  0.0 183080  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44990  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      44951  0.0  0.0 183080  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44987  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      44953  0.0  0.0 183080  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44992  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      44954  0.0  0.0 183080  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44983  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      44955  0.0  0.0 183080  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44984  0.0  0.0  20164   964 ?        Ss   01:54   0:00  |   \_ jailshell (pactpay) [45005] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   45005  0.0  0.0  20164   260 ?        S    01:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   45010  0.0  0.7 476724 17116 ?        S    01:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      44957  0.0  0.0 183080  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      44982  0.0  0.0  20164   964 ?        Ss   01:54   0:00      \_ jailshell (nigeria) [45013] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   45013  0.0  0.0  20164   260 ?        S    01:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   45019  0.0  0.6 400652 15936 ?        S    01:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3404 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.4 5654048 36296 ?       SLsl Nov07   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1240 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   360 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  4100 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.1  47332  4788 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1524 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4632 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.1  47104  4812 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24528 12248 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1536 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2916 ?        S    01:28   0:00  \_ dovecot/auth
cloudsms  44815  0.1  0.2  62068  6564 ?        S    01:53   0:00  \_ dovecot/lmtp
root      44816  0.0  0.1  41052  2724 ?        S    01:53   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13480 ?        Ssl  Nov07   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:03 /usr/sbin/sshd -D
root      44639  0.0  0.1 111304  4268 ?        Ss   01:53   0:00  \_ sshd: [accepted]
root      44878  0.0  0.1 111304  4268 ?        Ss   01:53   0:00  \_ sshd: [accepted]
root      44920  0.0  0.1 111304  4264 ?        Ss   01:53   0:00  \_ sshd: [accepted]
sshd      44921  0.0  0.1 115644  2628 ?        S    01:53   0:00  |   \_ sshd: [net]
root      44926  1.0  0.2 162436  5828 ?        Ss   01:53   0:00  \_ sshd: root [priv]
sshd      44927  0.0  0.1 115644  2632 ?        S    01:53   0:00      \_ sshd: root [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  44742 18.7  2.9 459288 72096 ?        S    01:53   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  44754 18.1  2.9 459288 72072 ?        S    01:53   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   44858  1.5  0.4 397784 11504 ?        S    01:53   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.7 436392 19064 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.1 298320  4672 ?        Ssl  Nov07   0:07 /usr/sbin/rsyslogd -n
root       1138  0.0  2.9 1763032 72164 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5928 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.8 858124 44156 ?        Ssl  Nov07   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  7260 ?        Ss   Nov07   0:06 cpsrvd (SSL) - waiting for connections                   
root      44935  0.0  0.0      0     0 ?        Z    01:53   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5572 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6268 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3432 ?        Ss   Nov07   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46496 ?        Ss   Nov07   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.9 269784 96212 ?        S    Nov07   0:03  \_ spamd child
root       5903  0.0  3.9 261484 94544 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3260 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.8 410480 20340 ?        Ss   Nov07   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  1.0 262228 24616 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209816 10412 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.1 167452  4256 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   524 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1388 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.4 1458856 252256 ?      Sl   Nov07   9:48 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 31436 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12816  1412 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1388 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12844  1420 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11904 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31270  0.1  1.5 277680 36312 ?        S    01:29   0:01  \_ /usr/sbin/httpd -k start
nobody    37099  0.1  1.4 277732 36056 ?        S    01:39   0:01  \_ /usr/sbin/httpd -k start
nobody    37462  0.1  1.4 277732 36228 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody    37713  0.1  1.4 277680 36136 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    37714  0.1  1.4 277996 36204 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody    37719  0.1  1.4 277688 36164 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody    40004  0.1  1.4 277960 36284 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    40684  0.1  1.4 277960 35888 ?        S    01:46   0:00  \_ /usr/sbin/httpd -k start
nobody    40908  0.1  1.4 277612 35764 ?        S    01:46   0:00  \_ /usr/sbin/httpd -k start
nobody    41737  0.1  1.4 277604 35432 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody    42195  0.1  1.4 277632 35704 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    43208  0.0  1.4 277604 35364 ?        S    01:50   0:00  \_ /usr/sbin/httpd -k start
nobody    43571  0.1  1.4 277632 35352 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody    44325  0.0  1.4 277604 35240 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
cloudw    45004  0.0  0.6 352096 15232 ?        S    01:54   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    44547  0.1  1.4 277600 35116 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.1 181772 28888 ?        Ss   00:00   0:07 lfd - sleeping
root      14462  0.0  0.4 1415368 10176 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      14500  0.0  0.4 1277312 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 25434  Threads: 3  Questions: 4684459  Slow queries: 0  Opens: 8051  Flush tables: 1  Open tables: 2000  Queries per second avg: 184.180
*************************** 1. row ***************************
     Id: 66351
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 66353
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 66355
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.151.128 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.226.213.41 TIME_WAIT
      1 45.87.42.68 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.155.170 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 178.23.189.67 TIME_WAIT
     37 103.253.27.139 TIME_WAIT
     38 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 01:54:01 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 7 hours 3 minutes 49 seconds
   Server load: 0.40 0.51 0.64
   Total accesses: 127015 - Total Traffic: 2.1 GB - Total Duration: 64868091
   CPU Usage: u8.18 s4.32 cu1107.57 cs752.59 - 7.36% CPU load
   4.99 requests/sec - 88.2 kB/second - 17.7 kB/request - 510.712 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K_W__RKKKK_W__.......R..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-3  43208 2/48/6925  K 0.70 1     294 3607218 61.8  0.84  129.18 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2033691966 HTTP/1.1
   1-3  37713 0/234/7373 _ 3.39 0     0   3857883 0.0   3.81  139.43 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-3  44325 0/17/7293  W 0.14 0     0   3730306 0.0   0.23  136.28 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4010687916 HTTP/1.1
   3-3  41737 0/111/6388 _ 2.60 0     289 3340243 0.0   2.51  115.66 103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-3  37714 0/379/7374 _ 4.89 1     1   3503829 0.0   5.09  114.42 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   5-3  40004 0/193/6676 R 2.49 2     287 3393798 0.0   2.36  116.89 102.216.11.3   http/1.1 cloudsms.com.ng:443
   6-3  42195 1/89/6757  K 1.37 1     271 3553133 30.5  1.64  133.64 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=823690470 HTTP/1.1
   7-3  37719 2/248/6362 K 3.52 2     265 3300940 62.5  5.63  116.04 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1245083743 HTTP/1.1
   8-3  37099 4/237/5992 K 3.68 2     329 3274027 125.0 4.70  102.11 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1349539626 HTTP/1.1
   9-3  31270 1/428/6012 K 6.10 0     257 3150705 31.2  6.75  99.58  66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3869043719 HTTP/1.1
   10-3 40684 0/142/5722 _ 1.75 1     1   2984441 0.0   1.80  112.64 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   11-3 40908 0/117/5893 W 1.66 0     0   2836089 0.0   1.88  91.32  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-3 44547 0/14/5392  _ 0.19 0     340 2610676 0.0   0.25  81.71  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1942003045 HTTP/1.1
   13-3 43571 0/57/3923  _ 1.19 0     288 2090525 0.0   1.25  65.61  103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-3 -     0/0/3600   . 0.00 730   0   1783740 0.0   0.00  55.76  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-3 -     0/0/4119   . 0.00 144   0   2027204 0.0   0.00  66.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-3 -     0/0/3767   . 0.00 775   0   1954260 0.0   0.00  62.41  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-3 -     0/0/3647   . 0.00 360   0   1846885 0.0   0.00  59.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-3 -     0/0/2031   . 0.00 793   0   1271684 0.0   0.00  31.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-3 -     0/0/2003   . 0.00 561   0   1238368 0.0   0.00  30.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-3 -     0/0/1845   . 0.00 442   0   998084  0.0   0.00  29.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-3 37462 0/270/1950 R 4.23 1     308 1074723 0.0   4.79  31.29  103.253.27.28  http/1.1 health.oyostate.gov.ng:443
   22-3 -     0/0/1659   . 0.00 728   0   894521  0.0   0.00  28.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -     0/0/410    . 0.00 766   0   197370  0.0   0.00  6.91   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/1633   . 0.00 1543  268 882363  0.0   0.00  32.38  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=566712460 HTTP/1.1
   25-2 -     0/0/1708   . 0.00 1657  0   732961  0.0   0.00  26.22  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/947    . 0.00 1676  0   513822  0.0   0.00  19.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/346    . 0.00 1656  0   135789  0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -     0/0/770    . 0.00 1209  0   288799  0.0   0.00  11.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/171    . 0.00 1671  0   59130   0.0   0.00  2.95   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/123    . 0.00 1674  0   43396   0.0   0.00  1.89   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/612    . 0.00 1659  0   305303  0.0   0.00  14.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -     0/0/182    . 0.00 1207  0   84782   0.0   0.00  2.53   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/41     . 0.00 1662  0   5107    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -     0/0/218    . 0.00 1253  0   93383   0.0   0.00  3.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/33     . 0.00 1672  0   4924    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/268    . 0.00 1675  0   137797  0.0   0.00  4.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/96     . 0.00 1651  0   44372   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/69     . 0.00 1546  293 27449   0.0   0.00  0.64   103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   39-2 -     0/0/51     . 0.00 1682  0   22615   0.0   0.00  0.65   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/60     . 0.00 1647  0   25287   0.0   0.00  0.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/38     . 0.00 1658  0   11904   0.0   0.00  0.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/337    . 0.00 1664  0   154508  0.0   0.00  4.48   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/1849   . 0.00 1649  0   792353  0.0   0.00  30.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/69     . 0.00 1547  286 19484   0.0   0.00  0.69   103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   45-2 -     0/0/204    . 0.00 1673  0   99186   0.0   0.00  2.83   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/14     . 0.00 1545  593 2052    0.0   0.00  0.12   102.90.98.148  http/1.1
   47-2 -     0/0/60     . 0.00 1546  298 23415   0.0   0.00  0.56   103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   48-2 -     0/0/345    . 0.00 1610  0   131502  0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16     . 0.00 1681  0   5601    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69     . 0.00 1655  0   32068   0.0   0.00  1.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94     . 0.00 1667  0   46144   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24     . 0.00 1665  0   7231    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902    . 0.00 1545  356 427396  0.0   0.00  16.37  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220    . 0.00 1677  0   104301  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20     . 0.00 1650  0   5450    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53     . 0.00 1543  352 26129   0.0   0.00  0.72   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18     . 0.00 2526  0   7494    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00 2361  0   26486   0.0   0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00 2585  0   37042   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00 2543  0   4755    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00 2589  0   8011    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00 2565  0   3968    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00 2550  0   126089  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00 2544  0   196325  0.0   0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249    . 0.00 1673  282 111456  0.0   0.00  3.97   102.90.98.148  http/1.1
   66-1 -     0/0/234    . 0.00 2552  0   130247  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00 2584  0   4952    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00 2538  0   5501    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00 2555  0   4783    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00 2570  0   9834    0.0   0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00 2564  0   3804    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00 2572  0   1625    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00 2528  0   3678    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00 2546  0   5547    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00 2547  0   2381    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00 2573  0   3573    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00 2542  0   351530  0.0   0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 10156 0   641     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00 10144 0   1675    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 361
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 1...90)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 2860
   total entries replaced since starting: 0
   total entries expired since starting: 2499
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 2 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit