403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.02.33.txt
 ## swap threshold exceeded
## server overview
2025-11-08.02.33 load[0] mem[54/79] mysql[5/12] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1202         228          61         932         932
Swap:          1999        1622         377
 02:33:01 up  7:43,  0 users,  load average: 0.94, 1.52, 1.87
## system overview
top - 02:33:01 up  7:43,  0 users,  load average: 0.94, 1.52, 1.87
Tasks: 200 total,   6 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 67.7 us, 19.4 sy,  0.0 ni, 12.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   230780 free,  1230704 used,   958816 buff/cache
KiB Swap:  2047996 total,   386852 free,  1661144 used.   955172 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 268744   4064 S  60.0 11.1  10:49.61 /usr/sbin+
 68532 healtho+  20   0  459484  72440   4468 R  33.3  3.0   0:04.80 php-fpm: +
 68587 healtho+  20   0  460140  74796   4872 R  20.0  3.1   0:03.50 php-fpm: +
 68750 nigeria   20   0  400652  15936  10220 R  20.0  0.7   0:00.04 /opt/cpan+
   501 nscd      20   0  994492   3436    712 S   6.7  0.1   0:13.37 /usr/sbin+
 68165 nobody    20   0  277620  35296   3768 S   6.7  1.5   0:00.06 /usr/sbin+
     1 root      20   0   44416   3480   1540 S   0.0  0.1   0:39.28 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.21 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.52 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:34.27 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.51 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.69 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.96 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.59 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.78 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.52 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   4412   4160 S   0.0  0.2   0:15.95 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    492    364 S   0.0  0.0   0:02.69 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    872    492 S   0.0  0.0   0:03.66 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    400    292 S   0.0  0.0   0:00.63 /usr/sbin+
   495 root      20   0   52852    464    352 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1352    624 S   0.0  0.1   0:14.41 /usr/bin/+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6732   1700 S   0.0  0.3   0:00.38 queueproc+
   536 root      20   0   24896   1400    820 S   0.0  0.1   0:06.35 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.78 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3904    896 S   0.0  0.2   0:00.43 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.30 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.38 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  36360   6040 S   0.0  1.5   0:15.09 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1240    848 S   0.0  0.1   0:00.35 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.60 pure-ftpd+
  1126 systuser  20   0  114016  13304   2940 S   0.0  0.5   0:06.25 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.04 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.58 /usr/bin/+
  1130 root      20   0  397344   6912   1660 S   0.0  0.3   0:07.12 php-fpm: +
  1134 root      20   0  436392  19064  11560 S   0.0  0.8   0:00.92 php-fpm: +
  1135 root      20   0  306512   4836   3968 S   0.0  0.2   0:08.24 /usr/sbin+
  1138 root      20   0 1763032  59084    376 S   0.0  2.4   0:14.01 /usr/loca+
  1162 root      20   0  385496   5852    816 S   0.0  0.2   0:00.80 php-fpm: +
  1168 named     20   0  858124  44988   1856 S   0.0  1.9   0:15.55 /usr/sbin+
  1170 root      20   0  261688   7112   1828 S   0.0  0.3   0:07.14 cpsrvd (S+
  1179 root      20   0  386112   5568    944 S   0.0  0.2   0:00.78 php-fpm: +
  1191 root      20   0  392856   6384    788 S   0.0  0.3   0:00.77 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3428   2208 S   0.0  0.1   0:22.93 /usr/loca+
  1280 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.09 dovecot/a+
  1350 root      20   0  248084  46212    892 S   0.0  1.9   0:06.09 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.12 SonarPush+
  1413 wp-tool+  20   0  387556   3468   1572 S   0.0  0.1   0:00.28 /usr/bin/+
  1414 wp-tool+  20   0  410480  16672   1672 S   0.0  0.7   0:22.70 /usr/bin/+
  1430 root      20   0  262224  24616   6760 S   0.0  1.0   0:03.66 cpdavd - +
  1435 root      20   0  209816  10864   2424 S   0.0  0.4   0:02.66 tailwatchd
  1436 root      20   0  167452   4164   2796 S   0.0  0.2   0:00.51 dnsadmin +
  1844 root      20   0  299272    524    364 S   0.0  0.0   0:00.73 php-fpm: +
  1905 root      38  18  130416   1388    704 S   0.0  0.1   0:00.07 cpanellog+
  2132 root      20   0  267108  31352   5760 S   0.0  1.3   0:02.37 /usr/sbin+
  5902 root      20   0  269784  94376   1388 S   0.0  3.9   0:03.96 spamd chi+
  5903 root      20   0  261484  94404    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.50 [kworker]
 13861 root      20   0  183048   1060    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12840   1396   1188 S   0.0  0.1   0:00.46 /usr/loca+
 30838 root      20   0   12732   1372   1188 S   0.0  0.1   0:00.40 /usr/loca+
 30839 root      20   0   12876   1408   1188 S   0.0  0.1   0:00.42 /usr/loca+
 30841 dovenull  20   0   46912   4060   3072 S   0.0  0.2   0:00.06 dovecot/p+
 30842 dovenull  20   0   47464   4988   3596 S   0.0  0.2   0:00.05 dovecot/i+
 30844 root      20   0   10452   1520   1148 S   0.0  0.1   0:00.05 dovecot/l+
 30845 dovenull  20   0   46912   4592   3512 S   0.0  0.2   0:00.07 dovecot/p+
 30846 dovenull  20   0   47376   5012   3604 S   0.0  0.2   0:00.03 dovecot/i+
 30847 root      20   0   24528  12244   1412 S   0.0  0.5   0:00.03 dovecot/c+
 30848 dovecot   20   0   13568   1532   1264 S   0.0  0.1   0:00.00 dovecot/s+
 30849 dovecot   20   0   41056   2952   2184 S   0.0  0.1   0:00.07 dovecot/a+
 30851 root      20   0   53252  11888   2512 S   0.0  0.5   0:00.05 /usr/loca+
 31251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48985 root      20   0 1276100  10744    600 S   0.0  0.4   0:00.07 /usr/bin/+
 49024 root      20   0 1277056  11708    600 S   0.0  0.5   0:00.07 /usr/bin/+
 52888 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 53487 nobody    20   0  277608  36416   4896 S   0.0  1.5   0:02.27 /usr/sbin+
 54236 nobody    20   0  277720  36528   4892 S   0.0  1.5   0:01.68 /usr/sbin+
 55736 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 58819 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59599 nobody    20   0  277608  36176   4640 S   0.0  1.5   0:01.12 /usr/sbin+
 59881 nobody    20   0  277612  36268   4748 S   0.0  1.5   0:01.08 /usr/sbin+
 59882 nobody    20   0  277660  36112   4540 S   0.0  1.5   0:01.20 /usr/sbin+
 59884 nobody    20   0  277960  36488   4776 S   0.0  1.5   0:01.08 /usr/sbin+
 60221 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 60773 nobody    20   0  277596  36232   4724 S   0.0  1.5   0:00.90 /usr/sbin+
 61060 nobody    20   0  277668  36312   4728 S   0.0  1.5   0:01.07 /usr/sbin+
 62044 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 62530 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63452 nobody    20   0  277604  35504   3988 S   0.0  1.5   0:00.65 /usr/sbin+
 63612 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 64433 nobody    20   0  277632  35528   3988 S   0.0  1.5   0:00.61 /usr/sbin+
 64822 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65208 nobody    20   0  277980  35612   3912 S   0.0  1.5   0:00.45 /usr/sbin+
 65473 nobody    20   0  277632  35664   4124 S   0.0  1.5   0:00.29 /usr/sbin+
 65596 worencom  20   0   38468   3836   2996 S   0.0  0.2   0:00.00 dovecot/i+
 66493 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 67737 nobody    20   0  277612  35328   3808 S   0.0  1.5   0:00.06 /usr/sbin+
 67789 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 68337 nobody    20   0  277944  35364   3704 S   0.0  1.5   0:00.08 /usr/sbin+
 68376 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68377 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 68499 nigeria   20   0  398104  12120   4064 S   0.0  0.5   0:00.39 php-fpm: +
 68513 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 68582 worencom  20   0   38468   3832   2996 S   0.0  0.2   0:00.00 dovecot/i+
 68602 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68603 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 68688 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 68689 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 68690 root      20   0       0      0      0 Z   0.0  0.0   0:00.01 [cpaneld +
 68697 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68698 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 68700 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68701 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68703 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68704 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68705 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68706 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68707 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68708 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68710 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68712 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 68713 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 68718 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 68719 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 68720 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 68721 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68722 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68723 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68724 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68725 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 68727 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 68728 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 68730 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 68737 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 68739 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 68740 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 68751 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 68776 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 68778 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [setupvir+
 68779 cloudw    20   0  282380  10380   7264 R   0.0  0.4   0:00.00 /opt/cpan+
 75823 root      20   0  182232  29300   1368 S   0.0  1.2   0:09.73 lfd - sle+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:34  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      31251  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:4]
root      52888  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:4]
root      55736  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      56209  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root      58819  0.0  0.0      0     0 ?        S    02:16   0:00  \_ [kworker/1:3]
root      60221  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/u200:0]
root      62044  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/0:2]
root      62530  0.0  0.0      0     0 ?        S    02:22   0:00  \_ [kworker/1:0]
root      63612  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/0:3]
root      64822  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/1:2]
root      66493  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44416  3480 ?        Ss   Nov07   0:39 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4412 ?        Ss   Nov07   0:15 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   492 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   872 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   400 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   464 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1352 ?        Ss   Nov07   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3436 ?        Ssl  Nov07   0:13 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6732 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1400 ?        Ss   Nov07   0:06 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1060 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      68698  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68720  0.0  0.0 113284  1212 ?        Ss   02:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      68730  0.0  0.0 108052   356 ?        S    02:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      68737  0.0  0.0 113288  1520 ?        S    02:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      68780  0.0  0.0 153840  2088 ?        R    02:33   0:00  |               \_ ps auxf
root      68700  0.0  0.1 183080  2428 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68721  0.0  0.0  20164   804 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      68701  0.0  0.1 183080  2428 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68724  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      68703  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68722  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      68704  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68727  0.0  0.0  20164   984 ?        Ss   02:33   0:00  |   \_ jailshell (cloudsms) [68781] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  68781  0.0  0.0  20164   260 ?        S    02:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      68705  0.0  0.1 183080  2424 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68723  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      68706  0.0  0.0 183080  2420 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68728  0.0  0.0  20164   804 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      68707  0.0  0.0 183080  2420 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68725  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      68708  0.0  0.0 183080  2420 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68719  0.0  0.0  20164   964 ?        Ss   02:33   0:00  |   \_ jailshell (pactpay) [68740] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68740  0.0  0.0  20164   260 ?        S    02:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   68751  0.0  0.7 476724 17484 ?        S    02:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      68710  0.0  0.0 183080  2420 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      68718  0.0  0.0  20164   964 ?        Ss   02:33   0:00      \_ jailshell (nigeria) [68739] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68739  0.0  0.0  20164   260 ?        S    02:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   68750  0.0  0.6 400652 15936 ?        S    02:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3904 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.5 5654048 36360 ?       SLsl Nov07   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1240 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   360 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  4060 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.2  47464  4988 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1520 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4592 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.2  47376  5012 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24528 12244 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1532 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2952 ?        S    01:28   0:00  \_ dovecot/auth
worencom  65596  0.0  0.1  38468  3836 ?        S    02:27   0:00  \_ dovecot/imap
root      67789  0.0  0.1  60820  4512 ?        S    02:31   0:00  \_ dovecot/lmtp
root      68513  0.0  0.1  41052  2728 ?        S    02:32   0:00  \_ dovecot/auth -w
worencom  68582  0.0  0.1  38468  3832 ?        S    02:32   0:00  \_ dovecot/imap
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13304 ?        Ssl  Nov07   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root      68376  0.0  0.1 111304  4268 ?        Ss   02:32   0:00  \_ sshd: [accepted]
sshd      68377  0.0  0.1 115644  2628 ?        S    02:32   0:00  |   \_ sshd: [net]
root      68602  0.0  0.1 111304  4264 ?        Ss   02:32   0:00  \_ sshd: [accepted]
sshd      68603  0.0  0.1 115644  2624 ?        S    02:32   0:00  |   \_ sshd: [net]
root      68688  1.0  0.2 162436  5836 ?        Ss   02:32   0:00  \_ sshd: root [priv]
sshd      68689  0.0  0.1 115644  2632 ?        S    02:32   0:00  |   \_ sshd: root [net]
root      68697  0.0  0.1 111304  4268 ?        Ss   02:33   0:00  \_ sshd: [accepted]
root      68712  0.0  0.1 111304  4272 ?        Ss   02:33   0:00  \_ sshd: [accepted]
sshd      68713  0.0  0.1 115644  2632 ?        S    02:33   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6912 ?        Ss   Nov07   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   68499  1.2  0.5 398104 12120 ?        S    02:32   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  68532 17.7  2.9 459484 72440 ?        R    02:32   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  68587 19.6  3.0 460140 74796 ?        R    02:32   0:03  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.7 436392 19064 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.1 306512  4836 ?        Ssl  Nov07   0:08 /usr/sbin/rsyslogd -n
root       1138  0.0  2.4 1763032 59084 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5852 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.8 858124 44988 ?        Ssl  Nov07   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  7112 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
root      68690  1.0  0.0      0     0 ?        Z    02:32   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5568 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6384 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3428 ?        Ss   Nov07   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46212 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.8 269784 94376 ?        S    Nov07   0:03  \_ spamd child
root       5903  0.0  3.9 261484 94404 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3468 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 16672 ?        Ss   Nov07   0:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  1.0 262224 24616 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209816 10864 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.1 167452  4164 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   524 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1388 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 11.1 1458856 268744 ?      Sl   Nov07  10:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 31352 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12840  1396 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1372 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12876  1408 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11888 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    53487  0.1  1.5 277608 36416 ?        S    02:07   0:02  \_ /usr/sbin/httpd -k start
nobody    54236  0.1  1.5 277720 36528 ?        S    02:08   0:01  \_ /usr/sbin/httpd -k start
nobody    59599  0.1  1.4 277608 36176 ?        S    02:17   0:01  \_ /usr/sbin/httpd -k start
nobody    59881  0.1  1.4 277612 36268 ?        S    02:17   0:01  \_ /usr/sbin/httpd -k start
nobody    59882  0.1  1.4 277660 36112 ?        S    02:17   0:01  \_ /usr/sbin/httpd -k start
nobody    59884  0.1  1.5 277960 36488 ?        S    02:17   0:01  \_ /usr/sbin/httpd -k start
nobody    60773  0.1  1.4 277596 36232 ?        S    02:19   0:00  \_ /usr/sbin/httpd -k start
nobody    61060  0.1  1.5 277668 36312 ?        S    02:19   0:01  \_ /usr/sbin/httpd -k start
nobody    63452  0.1  1.4 277604 35504 ?        S    02:23   0:00  \_ /usr/sbin/httpd -k start
nobody    64433  0.1  1.4 277632 35528 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    65208  0.1  1.4 277980 35612 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    65473  0.0  1.4 277632 35664 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody    67737  0.0  1.4 277612 35328 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    68165  0.0  1.4 277620 35296 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    68337  0.1  1.4 277944 35364 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
cloudw    68779  0.0  0.6 286416 15204 ?        Sl   02:33   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182232 29300 ?        Ss   00:00   0:09 lfd - sleeping
root      48985  0.0  0.4 1276100 10744 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      49024  0.0  0.4 1277056 11708 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 27774  Threads: 5  Questions: 5160636  Slow queries: 0  Opens: 8716  Flush tables: 1  Open tables: 2000  Queries per second avg: 185.808
*************************** 1. row ***************************
     Id: 73212
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-08' LIMIT 1
*************************** 2. row ***************************
     Id: 73214
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 73220
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 73221
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 73223
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 113.31.186.146 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 148.113.128.49 TIME_WAIT
      1 15.235.27.90 TIME_WAIT
      1 15.235.96.218 TIME_WAIT
      1 155.117.98.117 TIME_WAIT
      1 167.114.139.9 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.170.111.138 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.246.13.163 TIME_WAIT
      1 2.56.73.77 TIME_WAIT
      1 45.67.140.73 TIME_WAIT
      1 47.128.59.181 TIME_WAIT
      1 51.222.168.215 TIME_WAIT
      1 52.167.144.192 TIME_WAIT
      1 54.39.136.177 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     31 103.253.27.28 TIME_WAIT
     35 103.253.27.139 TIME_WAIT
    106 20.222.66.73 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 02:33:01 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 7 hours 42 minutes 49 seconds
   Server load: 0.94 1.52 1.87
   Total accesses: 141025 - Total Traffic: 2.3 GB - Total Duration: 73489034
   CPU Usage: u9.89 s5.07 cu1206.82 cs819.81 - 7.35% CPU load
   5.08 requests/sec - 87.7 kB/second - 17.3 kB/request - 521.106 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

W_KRK.WWW__.W..KK..K._..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-3  67737 0/14/7470  W 0.22 0     0   3990063 0.0   0.24  137.67 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-3  60773 0/243/8195 _ 2.81 0     353 4246028 0.0   5.31  150.99 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3228673603 HTTP/1.1
   2-3  63452 1/157/8101 K 2.24 2     355 4214037 31.2  2.51  149.61 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1713813723 HTTP/1.1
   3-3  59599 0/292/7217 R 3.70 2     284 3759473 0.0   4.42  124.55 103.253.27.28  http/1.1
   4-3  64433 1/150/8231 K 2.17 1     390 3992551 30.4  2.46  124.59 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2678610256 HTTP/1.1
   5-3  -     0/0/7193   . 0.00 41    0   3793272 0.0   0.00  126.64 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-3  65208 0/116/7341 W 1.52 0     0   3969698 0.0   1.76  142.89 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-3  65473 0/70/7030  W 0.98 0     0   3583095 0.0   1.14  122.51 51.222.168.180 http/1.1 health.oyostate.gov.ng:443 GET /wp-sitemap-posts-footer-1.xml HTTP/1.1
   8-3  68165 0/24/6662  W 0.11 0     0   3703306 0.0   0.19  113.88 68.221.67.174  http/1.1 oysipa.oyostate.gov.ng:443 GET /admin/uploads/INVEST-IN-AGRIBUSINESS.pdf HTTP/1.1
   9-3  54236 0/391/6789 _ 6.47 0     0   3634033 0.0   7.39  113.30 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-3 61060 0/427/6567 _ 3.30 0     281 3306404 0.0   4.52  121.30 103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   11-3 -     0/0/6544   . 0.00 20    0   3228401 0.0   0.00  99.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-3 68337 4/23/5818  W 0.50 0     0   2928523 124.3 0.33  87.95  66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1094676984 HTTP/1.1
   13-3 -     0/0/4275   . 0.00 632   0   2376309 0.0   0.00  69.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-3 -     0/0/4023   . 0.00 504   0   2150351 0.0   0.00  62.78  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-3 59881 2/292/4466 K 3.47 3     409 2317490 61.9  4.65  71.60  66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1099582721 HTTP/1.1
   16-3 53487 2/782/4647 K 9.83 1     391 2400686 62.0  7.31  71.64  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2713377283 HTTP/1.1
   17-3 -     0/0/4098   . 0.00 628   0   2159808 0.0   0.00  64.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-3 -     0/0/2367   . 0.00 746   0   1466100 0.0   0.00  33.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-3 59882 1/347/2380 K 4.52 3     350 1503802 31.0  4.74  36.20  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=322539904 HTTP/1.1
   20-3 -     0/0/2187   . 0.00 416   0   1239074 0.0   0.00  33.76  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-3 59884 0/290/2481 _ 3.48 1     285 1413492 0.0   4.15  37.90  103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   22-3 -     0/0/1765   . 0.00 668   0   1065934 0.0   0.00  28.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -     0/0/416    . 0.00 1712  0   199668  0.0   0.00  6.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -     0/0/1641   . 0.00 1716  0   883602  0.0   0.00  32.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -     0/0/1711   . 0.00 1724  0   733768  0.0   0.00  26.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -     0/0/949    . 0.00 1736  0   513824  0.0   0.00  19.58  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -     0/0/348    . 0.00 1735  0   135791  0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -     0/0/772    . 0.00 1737  0   288804  0.0   0.00  11.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -     0/0/736    . 0.00 152   0   449336  0.0   0.00  10.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -     0/0/127    . 0.00 1723  0   44598   0.0   0.00  1.93   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -     0/0/615    . 0.00 1734  0   305307  0.0   0.00  14.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -     0/0/186    . 0.00 1719  0   86066   0.0   0.00  2.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -     0/0/45     . 0.00 1722  0   7032    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -     0/0/280    . 0.00 1552  0   117255  0.0   0.00  4.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -     0/0/34     . 0.00 1746  0   4925    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -     0/0/271    . 0.00 1728  0   138957  0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -     0/0/180    . 0.00 1426  0   80106   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -     0/0/70     . 0.00 1747  0   27450   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -     0/0/55     . 0.00 1721  0   23711   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -     0/0/120    . 0.00 1503  0   47805   0.0   0.00  1.27   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -     0/0/41     . 0.00 1727  0   13053   0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -     0/0/343    . 0.00 1707  0   157003  0.0   0.00  4.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -     0/0/1852   . 0.00 1731  0   792927  0.0   0.00  30.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -     0/0/70     . 0.00 1744  0   19485   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -     0/0/207    . 0.00 1732  0   100344  0.0   0.00  2.84   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -     0/0/17     . 0.00 1733  0   3427    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -     0/0/61     . 0.00 1745  0   23416   0.0   0.00  0.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -     0/0/373    . 0.00 1585  0   143685  0.0   0.00  4.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16     . 0.00 4021  0   5601    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69     . 0.00 3995  0   32068   0.0   0.00  1.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94     . 0.00 4007  0   46144   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24     . 0.00 4005  0   7231    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902    . 0.00 3885  356 427396  0.0   0.00  16.37  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220    . 0.00 4017  0   104301  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20     . 0.00 3990  0   5450    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53     . 0.00 3883  352 26129   0.0   0.00  0.72   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18     . 0.00 4866  0   7494    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00 4701  0   26486   0.0   0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00 4925  0   37042   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00 4883  0   4755    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00 4929  0   8011    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00 4905  0   3968    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00 4890  0   126089  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00 4884  0   196325  0.0   0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249    . 0.00 4013  282 111456  0.0   0.00  3.97   102.90.98.148  http/1.1
   66-1 -     0/0/234    . 0.00 4892  0   130247  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00 4924  0   4952    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00 4878  0   5501    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00 4895  0   4783    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00 4910  0   9834    0.0   0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00 4904  0   3804    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00 4912  0   1625    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00 4868  0   3678    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00 4886  0   5547    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00 4887  0   2381    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00 4913  0   3573    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00 4882  0   351530  0.0   0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 12496 0   641     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00 12484 0   1675    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 341
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 22 seconds, (range: 0...98)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 7684
   total entries replaced since starting: 0
   total entries expired since starting: 7342
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 22 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit