403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.02.09.txt
 ## swap threshold exceeded
## server overview
2025-11-08.02.09 load[0] mem[54/78] mysql[1/12] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1229         258          64         875         902
Swap:          1999        1601         398
 02:09:01 up  7:19,  0 users,  load average: 0.76, 0.82, 0.81
## system overview
top - 02:09:02 up  7:19,  0 users,  load average: 0.76, 0.82, 0.81
Tasks: 202 total,   8 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 46.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   253428 free,  1269772 used,   897100 buff/cache
KiB Swap:  2047996 total,   408444 free,  1639552 used.   913268 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 253232   3868 S  18.8 10.5  10:09.04 /usr/sbin+
 54420 root      20   0  145700   9008   2540 R  18.8  0.4   0:00.03 /usr/loca+
     1 root      20   0   44416   3644   1704 R   6.2  0.2   0:37.47 /usr/lib/+
   496 dbus      20   0   57040   1352    624 R   6.2  0.1   0:13.66 /usr/bin/+
  1135 root      20   0  298320   6840   5928 S   6.2  0.3   0:07.75 /usr/sbin+
 54432 nigeria   20   0  400652  15936  10220 R   6.2  0.7   0:00.01 /opt/cpan+
 54433 pactpay   20   0  476460  15968  10408 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.03 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.49 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:32.60 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.48 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.46 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.65 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.74 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.12 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.43 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   6636   6384 S   0.0  0.3   0:15.03 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    492    364 S   0.0  0.0   0:02.53 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    872    492 S   0.0  0.0   0:03.47 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    400    292 S   0.0  0.0   0:00.59 /usr/sbin+
   495 root      20   0   52852    276    164 S   0.0  0.0   0:00.01 /usr/sbin+
   501 nscd      20   0  994492   3440    716 S   0.0  0.1   0:12.59 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6732   1700 S   0.0  0.3   0:00.37 queueproc+
   536 root      20   0   24896   1408    820 D   0.0  0.1   0:06.03 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.73 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3928    920 S   0.0  0.2   0:00.42 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.29 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.26 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  36396   6008 S   0.0  1.5   0:14.34 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1240    848 S   0.0  0.1   0:00.33 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.57 pure-ftpd+
  1126 systuser  20   0  114016  13420   3008 S   0.0  0.6   0:05.93 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:03.78 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.55 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:06.61 php-fpm: +
  1134 root      20   0  436392  19064  11560 S   0.0  0.8   0:00.88 php-fpm: +
  1138 root      20   0 1763032  67036    376 S   0.0  2.8   0:14.01 /usr/loca+
  1162 root      20   0  385496   5852    816 S   0.0  0.2   0:00.76 php-fpm: +
  1168 named     20   0  858124  44528   1784 S   0.0  1.8   0:14.53 /usr/sbin+
  1170 root      20   0  261688   7140   1816 S   0.0  0.3   0:06.96 cpsrvd (S+
  1179 root      20   0  386112   5572    948 S   0.0  0.2   0:00.74 php-fpm: +
  1191 root      20   0  392856   6436    840 S   0.0  0.3   0:00.74 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3432   2212 R   0.0  0.1   0:21.76 /usr/loca+
  1280 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.08 dovecot/a+
  1350 root      20   0  248084  46212    892 S   0.0  1.9   0:05.92 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.12 SonarPush+
  1413 wp-tool+  20   0  387556   3704   1808 S   0.0  0.2   0:00.28 /usr/bin/+
  1414 wp-tool+  20   0  410480  18928   1952 S   0.0  0.8   0:21.54 /usr/bin/+
  1430 root      20   0  262228  23976   6120 S   0.0  1.0   0:03.56 cpdavd - +
  1435 root      20   0  209816  10472   2048 S   0.0  0.4   0:02.56 tailwatchd
  1436 root      20   0  167452   4204   2836 S   0.0  0.2   0:00.49 dnsadmin +
  1844 root      20   0  299272    524    364 S   0.0  0.0   0:00.70 php-fpm: +
  1905 root      38  18  130416   1388    704 S   0.0  0.1   0:00.06 cpanellog+
  2132 root      20   0  267108  31352   5760 S   0.0  1.3   0:02.28 /usr/sbin+
  5902 root      20   0  269784  94376   1388 S   0.0  3.9   0:03.83 spamd chi+
  5903 root      20   0  261484  94404    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.48 [kworker]
 13861 root      20   0  183048   1060    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 20589 root      20   0       0      0      0 D   0.0  0.0   0:00.27 [kworker/+
 30170 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 30837 root      20   0   12804   1404   1196 S   0.0  0.1   0:00.26 /usr/loca+
 30838 root      20   0   12732   1380   1196 S   0.0  0.1   0:00.23 /usr/loca+
 30839 root      20   0   12832   1416   1196 S   0.0  0.1   0:00.24 /usr/loca+
 30841 dovenull  20   0   46912   4096   3108 S   0.0  0.2   0:00.03 dovecot/p+
 30842 dovenull  20   0   47332   4780   3596 S   0.0  0.2   0:00.04 dovecot/i+
 30844 root      20   0   10452   1520   1148 S   0.0  0.1   0:00.02 dovecot/l+
 30845 dovenull  20   0   46912   4628   3548 S   0.0  0.2   0:00.04 dovecot/p+
 30846 dovenull  20   0   47104   4804   3616 S   0.0  0.2   0:00.02 dovecot/i+
 30847 root      20   0   24396  12244   1412 S   0.0  0.5   0:00.02 dovecot/c+
 30848 dovecot   20   0   13568   1532   1264 S   0.0  0.1   0:00.00 dovecot/s+
 30849 dovecot   20   0   41056   2952   2184 S   0.0  0.1   0:00.04 dovecot/a+
 30851 root      20   0   53252  11892   2516 S   0.0  0.5   0:00.05 /usr/loca+
 31215 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37099 nobody    20   0  277772  36276   4572 S   0.0  1.5   0:02.04 /usr/sbin+
 37714 nobody    20   0  277996  36656   4768 S   0.0  1.5   0:02.36 /usr/sbin+
 39949 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 42195 nobody    20   0  277788  36056   4360 S   0.0  1.5   0:01.41 /usr/sbin+
 43484 root      20   0       0      0      0 D   0.0  0.0   0:00.10 [kworker/+
 44325 nobody    20   0  277604  35712   4180 S   0.0  1.5   0:01.28 /usr/sbin+
 47293 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 47728 nobody    20   0  277636  35600   4052 S   0.0  1.5   0:00.53 /usr/sbin+
 47737 nobody    20   0  277644  35760   4184 S   0.0  1.5   0:00.67 /usr/sbin+
 48985 root      20   0 1276100  10744    600 S   0.0  0.4   0:00.05 /usr/bin/+
 49024 root      20   0 1277056  11836    600 S   0.0  0.5   0:00.06 /usr/bin/+
 50093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50520 nobody    20   0  277612  35176   3656 S   0.0  1.5   0:00.34 /usr/sbin+
 50854 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 50856 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 51505 nobody    20   0  277652  35436   3868 S   0.0  1.5   0:00.32 /usr/sbin+
 51529 nobody    20   0  277604  35316   3804 S   0.0  1.5   0:00.32 /usr/sbin+
 52888 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53460 nobody    20   0  277612  35492   3972 S   0.0  1.5   0:00.14 /usr/sbin+
 53461 nobody    20   0  277572  35304   3824 S   0.0  1.5   0:00.12 /usr/sbin+
 53486 nobody    20   0  277612  35376   3856 S   0.0  1.5   0:00.14 /usr/sbin+
 53487 nobody    20   0  277572  35204   3724 S   0.0  1.5   0:00.17 /usr/sbin+
 53507 nobody    20   0  277612  35236   3712 S   0.0  1.5   0:00.06 /usr/sbin+
 53732 nobody    20   0  277568  35192   3712 S   0.0  1.5   0:00.08 /usr/sbin+
 53749 nobody    20   0  277556  35000   3540 S   0.0  1.4   0:00.13 /usr/sbin+
 53904 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54176 healtho+  20   0  459288  72088   4196 S   0.0  3.0   0:04.82 php-fpm: +
 54198 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 54203 nobody    20   0  277652  35048   3496 S   0.0  1.4   0:00.05 /usr/sbin+
 54222 nigeria   20   0  397784  11552   3956 S   0.0  0.5   0:00.23 php-fpm: +
 54232 nobody    20   0  277652  35216   3668 S   0.0  1.5   0:00.02 /usr/sbin+
 54236 nobody    20   0  277652  35000   3448 S   0.0  1.4   0:00.01 /usr/sbin+
 54237 nobody    20   0  277608  34904   3568 S   0.0  1.4   0:00.00 /usr/sbin+
 54256 nobody    20   0  277504  34648   3296 S   0.0  1.4   0:00.00 /usr/sbin+
 54303 healtho+  20   0  457240  69980   4192 S   0.0  2.9   0:01.44 php-fpm: +
 54314 nobody    20   0  277352  34536   3348 S   0.0  1.4   0:00.00 /usr/sbin+
 54348 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 54351 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 54352 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 54355 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54357 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54358 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54359 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54360 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54361 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54362 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54363 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54364 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54365 root      20   0  183080   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 54366 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 54368 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 54369 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [crond]
 54370 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 54376 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 54377 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 54403 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 54404 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 54405 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54406 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54408 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54409 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54410 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54411 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 54412 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 54413 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 54414 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 54415 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 54428 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 54430 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 54431 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 75823 root      20   0  182032  29112   1368 S   0.0  1.2   0:08.18 lfd - sle+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:32  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      20589  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:3]
root      30170  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root      31215  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:2]
root      31251  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:4]
root      39949  0.0  0.0      0     0 ?        S    01:45   0:00  \_ [kworker/0:1]
root      43484  0.0  0.0      0     0 ?        S    01:51   0:00  \_ [kworker/0:2]
root      47293  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/1:0]
root      50093  0.0  0.0      0     0 ?        S    02:02   0:00  \_ [kworker/1:3]
root      50854  0.0  0.0      0     0 ?        S    02:03   0:00  \_ [kworker/0:0]
root      50856  0.0  0.0      0     0 ?        S    02:03   0:00  \_ [kworker/u200:0]
root      52888  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:4]
root      53904  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44416  3644 ?        Ss   Nov07   0:37 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  6636 ?        Ss   Nov07   0:15 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   492 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   872 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   400 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   276 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1352 ?        Ss   Nov07   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3440 ?        Ssl  Nov07   0:12 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6732 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1408 ?        Ss   Nov07   0:06 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      54355  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54370  0.0  0.0 113284  1212 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      54376  0.0  0.0 108052   356 ?        S    02:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      54377  0.0  0.0 113288  1516 ?        S    02:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      54439  0.0  0.0 153840  2092 ?        R    02:09   0:00  |               \_ ps auxf
root      54357  0.0  0.1 183080  2424 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54408  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      54358  0.0  0.1 183080  2424 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54414  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      54359  0.0  0.1 183080  2424 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54406  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      54360  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54409  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      54361  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54405  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      54363  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54410  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      54364  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54412  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      54365  0.0  0.0 183080  2412 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54413  0.0  0.0 113284  1208 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      54420  0.0  0.4 152116 11332 ?        R    02:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      54366  0.0  0.0 183080  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54415  0.0  0.0  20164   968 ?        Ss   02:09   0:00  |   \_ jailshell (pactpay) [54430] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   54430  0.0  0.0  20164   264 ?        S    02:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   54433  0.0  0.6 476460 15968 ?        Sl   02:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      54368  0.0  0.0 183080  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      54411  0.0  0.0  20164   964 ?        Ss   02:09   0:00      \_ jailshell (nigeria) [54428] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   54428  0.0  0.0  20164   260 ?        S    02:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   54432  0.0  0.6 400652 15936 ?        R    02:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3928 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.5 5654048 36396 ?       SLsl Nov07   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1240 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   360 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  4096 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.1  47332  4780 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1520 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4628 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.1  47104  4804 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24396 12244 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1532 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2952 ?        S    01:28   0:00  \_ dovecot/auth
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13420 ?        Ssl  Nov07   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:03 /usr/sbin/sshd -D
root      54198  0.0  0.1 111304  4264 ?        Ss   02:08   0:00  \_ sshd: [accepted]
root      54351  0.0  0.1 111304  4264 ?        Ss   02:09   0:00  \_ sshd: [accepted]
sshd      54352  0.0  0.1 115644  2628 ?        S    02:09   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  54176 17.2  2.9 459288 72088 ?        S    02:08   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   54222  1.1  0.4 397784 11552 ?        S    02:08   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  54303 16.0  2.8 457240 69980 ?        S    02:08   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.7 436392 19064 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.2 298320  6840 ?        Ssl  Nov07   0:07 /usr/sbin/rsyslogd -n
root       1138  0.0  2.7 1763032 67036 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5852 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.8 858124 44528 ?        Ssl  Nov07   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  7140 ?        Ss   Nov07   0:06 cpsrvd (SSL) - waiting for connections                   
root      54348  0.0  0.0      0     0 ?        Z    02:08   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5572 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6436 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3432 ?        Ss   Nov07   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46212 ?        Ss   Nov07   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.8 269784 94376 ?        S    Nov07   0:03  \_ spamd child
root       5903  0.0  3.9 261484 94404 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3704 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.7 410480 18928 ?        Ss   Nov07   0:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  0.9 262228 23976 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209816 10472 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.1 167452  4204 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   524 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1388 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.4 1458856 253232 ?      Sl   Nov07  10:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 31352 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12804  1404 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1380 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12832  1416 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11892 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    37099  0.1  1.4 277772 36276 ?        S    01:39   0:02  \_ /usr/sbin/httpd -k start
nobody    37714  0.1  1.5 277996 36656 ?        S    01:40   0:02  \_ /usr/sbin/httpd -k start
nobody    42195  0.1  1.4 277788 36056 ?        S    01:49   0:01  \_ /usr/sbin/httpd -k start
nobody    44325  0.1  1.4 277604 35712 ?        S    01:52   0:01  \_ /usr/sbin/httpd -k start
nobody    47728  0.0  1.4 277636 35600 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    47737  0.1  1.4 277644 35760 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    50520  0.0  1.4 277612 35176 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    51505  0.1  1.4 277652 35436 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    51529  0.1  1.4 277604 35316 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    53460  0.1  1.4 277612 35492 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53461  0.1  1.4 277572 35304 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53486  0.1  1.4 277612 35376 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53487  0.1  1.4 277572 35204 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53507  0.0  1.4 277612 35236 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53732  0.1  1.4 277568 35192 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    53749  0.1  1.4 277556 35000 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    54203  0.2  1.4 277652 35048 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    54232  0.1  1.4 277652 35216 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    54236  0.0  1.4 277652 35000 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    54237  0.0  1.4 277608 34904 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    54256  0.0  1.4 277504 34648 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    54314  0.0  1.4 277352 34536 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182032 29112 ?        Ss   00:00   0:08 lfd - sleeping
root      48985  0.0  0.4 1276100 10744 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      49024  0.0  0.4 1277056 11836 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 26335  Threads: 3  Questions: 4840116  Slow queries: 0  Opens: 8362  Flush tables: 1  Open tables: 2000  Queries per second avg: 183.790
*************************** 1. row ***************************
     Id: 68500
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 68501
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 68504
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 205.234.147.231 TIME_WAIT
      1 216.73.216.88 TIME_WAIT
      1 217.216.109.92 TIME_WAIT
      1 45.153.101.225 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 85.254.42.49 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 178.20.43.173 TIME_WAIT
      2 34.38.222.110 TIME_WAIT
      3 47.128.44.187 TIME_WAIT
     24 20.222.66.73 TIME_WAIT
     27 103.253.27.139 TIME_WAIT
     31 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 02:09:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 7 hours 18 minutes 50 seconds
   Server load: 0.76 0.82 0.81
   Total accesses: 132076 - Total Traffic: 2.2 GB - Total Duration: 66818905
   CPU Usage: u8.21 s4.26 cu1146.38 cs778.02 - 7.36% CPU load
   5.02 requests/sec - 88.0 kB/second - 17.5 kB/request - 505.913 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KKRKR_KWR_R_K_RK__R_........._.......K..........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-3  53732 1/20/7096  K 0.27 2     307 3687305 36.0  0.29  132.20 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=2431176819 HTTP/1.1
   1-3  53749 3/109/7674 K 0.48 1     268 3955848 98.1  0.25  143.14 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=2578931501 HTTP/1.1
   2-3  44325 0/284/7560 R 5.59 1     4   3864457 0.0   6.94  143.00 103.253.27.139  http/1.1 health.oyostate.gov.ng:443
   3-3  54203 30/34/6680 K 0.09 0     0   3439395 19.8  0.09  118.71 217.216.109.92  http/1.1 cloudsms.com.ng:80         GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1
   4-3  37714 0/714/7709 R 8.88 1     284 3677367 0.0   9.29  118.62 103.253.27.28   http/1.1 health.oyostate.gov.ng:443
   5-3  54232 0/4/6798   _ 0.06 1     150 3466385 0.0   0.09  119.06 18.97.9.171     http/1.1 nigeriadecide.org:443      GET / HTTP/1.1
   6-3  42195 2/341/7009 K 5.63 1     272 3679220 63.7  6.01  138.01 66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=4250185759 HTTP/1.1
   7-3  47728 0/220/6713 W 1.47 0     0   3363545 0.0   1.73  118.19 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-3  37099 0/548/6303 R 7.36 54    344 3396489 0.0   12.51 109.92 47.128.44.187   http/1.1
   9-3  54236 0/4/6402   _ 0.05 1     7   3328799 0.0   0.06  105.97 114.119.143.119 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Rivers&lga=Khana&ward=Bori
   10-3 50520 0/152/6018 R 1.33 53    397 3059695 0.0   1.16  115.17 47.128.44.187   http/1.1
   11-3 53460 0/43/6117  _ 0.41 0     0   2946731 0.0   0.52  95.24  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-3 53461 1/29/5549  K 0.63 0     298 2678711 35.2  0.47  84.35  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=528695566 HTTP/1.1
   13-3 47737 0/196/4159 _ 2.15 0     284 2182508 0.0   2.39  68.76  103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-3 54237 0/2/3750   R 0.00 14    6   1858245 0.0   0.01  58.35  102.90.98.148   http/1.1
   15-3 53486 4/32/4161  K 0.67 0     259 2044793 127.8 0.50  66.84  66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=111126752 HTTP/1.1
   16-3 53487 0/128/3993 _ 0.57 0     297 2016670 0.0   0.31  64.64  103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-3 54256 0/2/3771   _ 0.02 1     1   1905429 0.0   0.02  61.08  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   18-3 53507 0/21/2054  R 0.12 53    286 1276522 0.0   0.17  31.20  47.128.44.187   http/1.1
   19-3 54314 0/3/2012   _ 0.00 0     7   1239621 0.0   0.02  31.03  98.82.63.147    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/blog/2019elections/p
   20-3 -     0/0/1915   . 0.00 60    0   1029761 0.0   0.00  31.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-3 -     0/0/2191   . 0.00 301   0   1144666 0.0   0.00  33.75  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-3 -     0/0/1665   . 0.00 291   0   895103  0.0   0.00  28.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -     0/0/416    . 0.00 273   0   199668  0.0   0.00  6.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -     0/0/1641   . 0.00 277   0   883602  0.0   0.00  32.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -     0/0/1711   . 0.00 285   0   733768  0.0   0.00  26.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -     0/0/949    . 0.00 297   0   513824  0.0   0.00  19.58  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -     0/0/348    . 0.00 296   0   135791  0.0   0.00  3.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -     0/0/772    . 0.00 298   0   288804  0.0   0.00  11.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 51505 0/167/338  _ 0.80 1     0   84533   0.0   0.87  3.82   18.97.9.171     http/1.1 nigeriadecide.org:80       GET / HTTP/1.1
   30-3 -     0/0/127    . 0.00 284   0   44598   0.0   0.00  1.93   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -     0/0/615    . 0.00 295   0   305307  0.0   0.00  14.56  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -     0/0/186    . 0.00 280   0   86066   0.0   0.00  2.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -     0/0/45     . 0.00 283   0   7032    0.0   0.00  0.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -     0/0/280    . 0.00 113   0   117255  0.0   0.00  4.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -     0/0/34     . 0.00 307   0   4925    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -     0/0/271    . 0.00 289   0   138957  0.0   0.00  4.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 51529 4/81/177   K 1.08 3     297 79446   123.6 1.26  2.48   66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=2941252575 HTTP/1.1
   38-3 -     0/0/70     . 0.00 308   0   27450   0.0   0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -     0/0/55     . 0.00 282   0   23711   0.0   0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -     0/0/120    . 0.00 63    0   47805   0.0   0.00  1.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -     0/0/41     . 0.00 288   0   13053   0.0   0.00  0.37   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -     0/0/343    . 0.00 268   0   157003  0.0   0.00  4.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -     0/0/1852   . 0.00 292   0   792927  0.0   0.00  30.21  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -     0/0/70     . 0.00 305   0   19485   0.0   0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -     0/0/207    . 0.00 293   0   100344  0.0   0.00  2.84   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -     0/0/17     . 0.00 294   0   3427    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -     0/0/61     . 0.00 306   0   23416   0.0   0.00  0.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -     0/0/373    . 0.00 146   0   143685  0.0   0.00  4.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16     . 0.00 2581  0   5601    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69     . 0.00 2555  0   32068   0.0   0.00  1.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94     . 0.00 2567  0   46144   0.0   0.00  1.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24     . 0.00 2565  0   7231    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902    . 0.00 2446  356 427396  0.0   0.00  16.37  66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220    . 0.00 2577  0   104301  0.0   0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20     . 0.00 2550  0   5450    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53     . 0.00 2444  352 26129   0.0   0.00  0.72   66.249.70.32    http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18     . 0.00 3426  0   7494    0.0   0.00  0.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00 3262  0   26486   0.0   0.00  0.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00 3485  0   37042   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00 3443  0   4755    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00 3489  0   8011    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00 3465  0   3968    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00 3450  0   126089  0.0   0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00 3444  0   196325  0.0   0.00  9.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249    . 0.00 2573  282 111456  0.0   0.00  3.97   102.90.98.148   http/1.1
   66-1 -     0/0/234    . 0.00 3452  0   130247  0.0   0.00  4.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00 3484  0   4952    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00 3438  0   5501    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00 3455  0   4783    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00 3470  0   9834    0.0   0.00  0.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00 3464  0   3804    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00 3472  0   1625    0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00 3428  0   3678    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00 3446  0   5547    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00 3447  0   2381    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00 3473  0   3573    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00 3442  0   351530  0.0   0.00  15.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 11057 0   641     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00 11045 0   1675    0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 383
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 30 seconds, (range: 2...124)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 3940
   total entries replaced since starting: 0
   total entries expired since starting: 3557
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 12 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit