403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-08.02.48 load[0] mem[54/79] mysql[3/12] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1199         158          61        1005         934
Swap:          1999        1620         379
 02:48:02 up  7:58,  0 users,  load average: 0.88, 1.25, 1.41
## system overview
top - 02:48:02 up  7:58,  0 users,  load average: 0.88, 1.25, 1.41
Tasks: 202 total,   3 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 73.5 us, 14.7 sy,  0.0 ni,  0.0 id,  8.8 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   153724 free,  1233768 used,  1032808 buff/cache
KiB Swap:  2047996 total,   388348 free,  1659648 used.   951548 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 253456   3816 S 143.8 10.5  11:10.95 /usr/sbin+
 79385 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.05 /opt/cpan+
   663 root       0 -20       0      0      0 S   6.2  0.0   0:03.32 [loop0]
  1414 wp-tool+  20   0  410480  16672   1672 S   6.2  0.7   0:23.45 /usr/bin/+
 72832 nobody    20   0  277952  35500   3820 S   6.2  1.5   0:00.52 /usr/sbin+
     1 root      20   0   44416   3480   1540 S   0.0  0.1   0:40.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.31 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:35.44 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.53 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.85 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.35 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.61 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.85 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.63 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   7556   7304 S   0.0  0.3   0:16.60 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    492    364 S   0.0  0.0   0:02.81 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    868    492 S   0.0  0.0   0:03.83 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    376    292 S   0.0  0.0   0:00.65 /usr/sbin+
   495 root      20   0   52852    424    312 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1352    624 S   0.0  0.1   0:15.04 /usr/bin/+
   501 nscd      20   0  994492   3408    684 S   0.0  0.1   0:13.84 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6732   1700 S   0.0  0.3   0:00.38 queueproc+
   536 root      20   0   24896   1400    820 S   0.0  0.1   0:06.64 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.80 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3900    896 S   0.0  0.2   0:00.44 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.46 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  36172   5636 S   0.0  1.5   0:15.57 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1240    848 S   0.0  0.1   0:00.36 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.62 pure-ftpd+
  1126 systuser  20   0  114016  13104   2724 S   0.0  0.5   0:06.45 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.19 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.60 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:07.35 php-fpm: +
  1134 root      20   0  436392  19060  11556 S   0.0  0.8   0:00.94 php-fpm: +
  1135 root      20   0  306512   7784   6900 S   0.0  0.3   0:08.55 /usr/sbin+
  1138 root      20   0 1763032  76796    952 S   0.0  3.2   0:14.12 /usr/loca+
  1162 root      20   0  385496   5852    816 S   0.0  0.2   0:00.82 php-fpm: +
  1168 named     20   0  858124  44540   1544 S   0.0  1.8   0:16.18 /usr/sbin+
  1170 root      20   0  261688   7044   1812 S   0.0  0.3   0:07.49 cpsrvd (S+
  1179 root      20   0  386112   5524    900 S   0.0  0.2   0:00.79 php-fpm: +
  1191 root      20   0  392856   6332    736 S   0.0  0.3   0:00.78 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3428   2208 S   0.0  0.1   0:23.67 /usr/loca+
  1280 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.09 dovecot/a+
  1350 root      20   0  248084  46212    892 S   0.0  1.9   0:06.20 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.12 SonarPush+
  1413 wp-tool+  20   0  387556   3704   1808 S   0.0  0.2   0:00.29 /usr/bin/+
  1430 root      20   0  262224  24688   6768 S   0.0  1.0   0:03.74 cpdavd - +
  1435 root      20   0  209816  10684   2416 S   0.0  0.4   0:02.82 tailwatchd
  1436 root      20   0  167452   4164   2796 S   0.0  0.2   0:00.53 dnsadmin +
  1844 root      20   0  299272    524    364 S   0.0  0.0   0:00.76 php-fpm: +
  1905 root      38  18  130416   1384    704 S   0.0  0.1   0:00.07 cpanellog+
  2132 root      20   0  267108  31284   5692 S   0.0  1.3   0:02.43 /usr/sbin+
  5902 root      20   0  269784  96592   2644 S   0.0  4.0   0:04.72 spamd chi+
  5903 root      20   0  261484  94404    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.53 [kworker]
 13861 root      20   0  183048   1056    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12820   1400   1188 S   0.0  0.1   0:00.56 /usr/loca+
 30838 root      20   0   12732   1372   1188 S   0.0  0.1   0:00.48 /usr/loca+
 30839 root      20   0   12844   1408   1188 S   0.0  0.1   0:00.51 /usr/loca+
 30841 dovenull  20   0   46912   4060   3072 S   0.0  0.2   0:00.08 dovecot/p+
 30842 dovenull  20   0   47600   4984   3592 S   0.0  0.2   0:00.06 dovecot/i+
 30844 root      20   0   10452   1520   1148 S   0.0  0.1   0:00.05 dovecot/l+
 30845 dovenull  20   0   46912   4572   3492 S   0.0  0.2   0:00.08 dovecot/p+
 30846 dovenull  20   0   47376   5008   3600 S   0.0  0.2   0:00.04 dovecot/i+
 30847 root      20   0   24556  12384   1416 S   0.0  0.5   0:00.05 dovecot/c+
 30848 dovecot   20   0   13568   1532   1264 S   0.0  0.1   0:00.00 dovecot/s+
 30849 dovecot   20   0   41056   2952   2184 S   0.0  0.1   0:00.09 dovecot/a+
 30851 root      20   0   53252  11888   2512 S   0.0  0.5   0:00.05 /usr/loca+
 48985 root      20   0 1349832  10760    604 S   0.0  0.4   0:00.08 /usr/bin/+
 49024 root      20   0 1277056  11708    600 S   0.0  0.5   0:00.07 /usr/bin/+
 55736 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 59882 nobody    20   0  277696  36352   4744 S   0.0  1.5   0:02.25 /usr/sbin+
 61060 nobody    20   0  277668  36416   4816 S   0.0  1.5   0:02.22 /usr/sbin+
 62044 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 64822 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65473 nobody    20   0  277672  36008   4420 S   0.0  1.5   0:01.38 /usr/sbin+
 69396 nobody    20   0  277632  35928   4360 S   0.0  1.5   0:01.05 /usr/sbin+
 69416 nobody    20   0  277620  35792   4256 S   0.0  1.5   0:01.04 /usr/sbin+
 69419 nobody    20   0  277612  35828   4304 S   0.0  1.5   0:01.05 /usr/sbin+
 70394 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70455 nobody    20   0  277604  35688   4172 S   0.0  1.5   0:00.77 /usr/sbin+
 71141 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71604 nobody    20   0  277968  35912   4220 S   0.0  1.5   0:00.67 /usr/sbin+
 74172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74197 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74204 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 74756 nobody    20   0  277952  35560   3888 S   0.0  1.5   0:00.41 /usr/sbin+
 75823 root      20   0  182436  29456   1368 S   0.0  1.2   0:10.74 lfd - sle+
 76158 nobody    20   0  277604  35520   4008 S   0.0  1.5   0:00.21 /usr/sbin+
 76159 nobody    20   0  277980  35552   3816 S   0.0  1.5   0:00.31 /usr/sbin+
 77792 nobody    20   0  277652  35276   3720 S   0.0  1.5   0:00.19 /usr/sbin+
 78351 nobody    20   0  277976  35404   3712 S   0.0  1.5   0:00.17 /usr/sbin+
 78535 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 78580 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 78888 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79102 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 79105 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 79137 healtho+  20   0  470304  83504   4296 S   0.0  3.5   0:04.87 php-fpm: +
 79234 healtho+  20   0  459288  72076   4188 S   0.0  3.0   0:02.54 php-fpm: +
 79302 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
 79325 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 79329 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 79330 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79331 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79332 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79333 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79334 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79335 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79336 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79337 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79338 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79340 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79341 root      20   0  183080   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 79342 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 79344 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79349 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79350 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79351 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79352 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 79353 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 79354 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79355 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79356 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79357 root      20   0  113284   1200   1024 S   0.0  0.0   0:00.00 /bin/sh /+
 79358 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 79361 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79362 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79363 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79365 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 79370 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 79371 root      20   0  129956   2324   1828 S   0.0  0.1   0:00.00 /usr/bin/+
 79377 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 79381 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 79382 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 79387 pactpay   20   0  476724  17488  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 79396 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 sh -c fin+
 79402 root      20   0  124136   5000    956 R   0.0  0.2   0:00.00 find /tmp+
 79403 root      20   0  112812   1008    860 S   0.0  0.0   0:00.00 grep -Ef +
 79419 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 79421 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 79422 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 79423 cloudsms  20   0  383088  10292   7192 R   0.0  0.4   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:35  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      55736  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      56209  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root      62044  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/0:2]
root      64822  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/1:2]
root      70394  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/1:1]
root      71141  0.0  0.0      0     0 ?        S    02:37   0:00  \_ [kworker/0:3]
root      74172  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      74197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/u200:2]
root      74204  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:4]
root      78888  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44416  3480 ?        Ss   Nov07   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  40244  7556 ?        Ss   Nov07   0:16 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   492 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   868 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   376 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   424 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1352 ?        Ss   Nov07   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3408 ?        Ssl  Nov07   0:13 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6732 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1400 ?        Ss   Nov07   0:06 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1056 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      79329  0.0  0.0 183080  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79353  0.0  0.0 113284  1208 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      79370  0.0  0.0 108052   356 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      79377  0.0  0.0 113288  1516 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      79424  0.0  0.0 153840  2096 ?        R    02:48   0:00  |               \_ ps auxf
root      79330  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79350  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      79331  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79356  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      79332  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79361  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      79333  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79351  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      79334  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79362  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      79335  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79363  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      79336  0.0  0.1 183080  2424 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79358  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [79421] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  79421  0.0  0.0  20164   264 ?        S    02:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  79422  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  79423  0.0  0.6 400652 15676 ?        R    02:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      79337  0.0  0.0 183080  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79354  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      79338  0.0  0.0 183080  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79349  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      79340  0.0  0.0 183080  2416 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79355  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      79341  0.0  0.0 183080  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79357  0.0  0.0 113284  1200 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      79371  0.0  0.0 129956  2324 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      79396  0.0  0.0 113284  1208 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      79402  0.0  0.2 124136  5000 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      79403  0.0  0.0 112812  1008 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      79342  0.0  0.0 183080  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79365  0.0  0.0  20164   968 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [79381] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   79381  0.0  0.0  20164   264 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   79387  1.0  0.7 476724 17488 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      79344  0.0  0.0 183080  2416 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79352  0.0  0.0  20164   964 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [79382] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   79382  0.0  0.0  20164   256 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   79385  5.0  0.6 400652 15940 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3900 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.4 5654048 36172 ?       SLsl Nov07   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1240 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   360 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  4060 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.2  47600  4984 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1520 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4572 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.2  47376  5008 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24556 12384 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1532 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2952 ?        S    01:28   0:00  \_ dovecot/auth
root      78535  0.0  0.1  41052  2724 ?        S    02:46   0:00  \_ dovecot/auth -w
root      78580  0.0  0.1  60820  4512 ?        S    02:46   0:00  \_ dovecot/lmtp
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13104 ?        Ssl  Nov07   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root      79102  0.0  0.1 111304  4264 ?        Ss   02:47   0:00  \_ sshd: [accepted]
sshd      79105  0.0  0.1 115644  2632 ?        S    02:47   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  79137 16.7  3.4 470304 83504 ?        S    02:47   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  79234 16.9  2.9 459288 72076 ?        S    02:47   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   79302  0.0  0.3 397064  8124 ?        S    02:47   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.7 436392 19060 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.3 306512  7784 ?        Ssl  Nov07   0:08 /usr/sbin/rsyslogd -n
root       1138  0.0  3.1 1763032 76796 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5852 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.8 858124 44540 ?        Ssl  Nov07   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  7044 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
root      79325  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5524 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6332 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3428 ?        Ss   Nov07   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46212 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.9 269784 96592 ?        S    Nov07   0:04  \_ spamd child
root       5903  0.0  3.9 261484 94404 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3704 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 16672 ?        Ss   Nov07   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  1.0 262224 24688 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209816 10684 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.1 167452  4164 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   524 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1384 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.4 1458856 253456 ?      Sl   Nov07  11:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 31284 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12820  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1372 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12844  1408 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11888 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    59882  0.1  1.5 277696 36352 ?        S    02:17   0:02  \_ /usr/sbin/httpd -k start
nobody    61060  0.1  1.5 277668 36416 ?        S    02:19   0:02  \_ /usr/sbin/httpd -k start
nobody    65473  0.1  1.4 277672 36008 ?        S    02:27   0:01  \_ /usr/sbin/httpd -k start
nobody    69396  0.1  1.4 277632 35928 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    69416  0.1  1.4 277620 35792 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    69419  0.1  1.4 277612 35828 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    70455  0.1  1.4 277604 35688 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    71604  0.1  1.4 277968 35912 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    72832  0.1  1.4 277952 35500 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    74756  0.1  1.4 277952 35560 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    76158  0.0  1.4 277604 35520 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    76159  0.1  1.4 277980 35552 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    77792  0.1  1.4 277652 35276 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    78351  0.1  1.4 277976 35404 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182436 29456 ?        Ss   00:00   0:10 lfd - sleeping
root      48985  0.0  0.4 1349832 10760 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      49024  0.0  0.4 1277056 11708 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 28675  Threads: 4  Questions: 5316290  Slow queries: 0  Opens: 8990  Flush tables: 1  Open tables: 2000  Queries per second avg: 185.398
*************************** 1. row ***************************
     Id: 75623
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 75624
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 75629
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 35.184.78.239 TIME_WAIT
      1 43.130.150.80 TIME_WAIT
      1 45.82.197.41 TIME_WAIT
      1 5.255.231.37 TIME_WAIT
      1 95.108.213.160 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     33 103.253.27.28 TIME_WAIT
     35 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 02:48:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 7 hours 57 minutes 50 seconds
   Server load: 0.88 1.25 1.41
   Total accesses: 145222 - Total Traffic: 2.4 GB - Total Duration: 75479266
   CPU Usage: u9.76 s4.9 cu1241.39 cs843.77 - 7.32% CPU load
   5.07 requests/sec - 87.8 kB/second - 17.3 kB/request - 519.751 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKW_KR_K..W_.K_..K.R............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-3  70455 1/279/7778  K 2.18 3     393 4083357 34.1  2.62  140.86 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3922305598 HTTP/1.1
   1-3  74756 2/83/8387   K 1.81 0     273 4344080 62.2  1.67  154.48 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=3595091451 HTTP/1.1
   2-3  78351 0/34/8276   W 0.64 0     0   4308165 0.0   0.70  153.27 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-3  76158 0/57/7467   _ 0.84 0     0   3888528 0.0   0.79  127.35 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-3  76159 3/62/8345   K 1.20 4     455 4053873 96.3  1.50  127.39 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=2169144961 HTTP/1.1
   5-3  72832 0/108/7338  R 2.04 2     4   3875106 0.0   2.20  129.31 103.253.27.28  http/1.1
   6-3  77792 0/39/7560   _ 0.76 1     349 4076094 0.0   0.81  147.65 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=2730375703 HTTP/1.1
   7-3  65473 1/341/7301  K 4.97 1     391 3707352 34.1  5.47  126.84 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=1531958108 HTTP/1.1
   8-3  -     0/0/6732    . 0.00 570   0   3741799 0.0   0.00  122.84 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-3  -     0/0/6881    . 0.00 513   0   3680554 0.0   0.00  114.84 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-3 61060 0/677/6817  W 7.62 0     0   3443220 0.0   9.17  125.95 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-3 71604 0/161/6711  _ 2.28 0     285 3316403 0.0   2.61  102.09 103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   12-3 -     0/0/5987    . 0.00 153   0   3012223 0.0   0.00  90.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-3 69396 19/321/4596 K 4.29 1     254 2492184 578.2 4.69  74.28  66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=1056294902 HTTP/1.1
   14-3 69416 0/227/4250  _ 3.91 1     1   2269504 0.0   4.41  67.19  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   15-3 -     0/0/4608    . 0.00 95    0   2386131 0.0   0.00  73.74  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-3 -     0/0/4816    . 0.00 99    0   2477289 0.0   0.00  74.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-3 69419 1/232/4330  K 4.05 1     406 2276635 22.4  4.34  69.14  45.41.139.212  http/1.1 health.oyostate.gov.ng:443 GET /portfolio/omituntun-free-health-mission-physically-challen
   18-3 -     0/0/2577    . 0.00 481   0   1512441 0.0   0.00  38.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-3 59882 0/659/2692  R 7.84 2     304 1682993 0.0   8.84  40.30  173.212.217.36 http/1.1 health.oyostate.gov.ng:443
   20-3 -     0/0/2271    . 0.00 233   0   1283269 0.0   0.00  35.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-3 -     0/0/2559    . 0.00 608   0   1455029 0.0   0.00  39.34  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-3 -     0/0/1765    . 0.00 1568  0   1065934 0.0   0.00  28.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -     0/0/416     . 0.00 2613  0   199668  0.0   0.00  6.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -     0/0/1641    . 0.00 2617  0   883602  0.0   0.00  32.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -     0/0/1711    . 0.00 2625  0   733768  0.0   0.00  26.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -     0/0/949     . 0.00 2637  0   513824  0.0   0.00  19.58  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -     0/0/348     . 0.00 2636  0   135791  0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -     0/0/772     . 0.00 2638  0   288804  0.0   0.00  11.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -     0/0/736     . 0.00 1053  0   449336  0.0   0.00  10.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -     0/0/127     . 0.00 2624  0   44598   0.0   0.00  1.93   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -     0/0/615     . 0.00 2635  0   305307  0.0   0.00  14.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -     0/0/186     . 0.00 2620  0   86066   0.0   0.00  2.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -     0/0/45      . 0.00 2623  0   7032    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -     0/0/280     . 0.00 2453  0   117255  0.0   0.00  4.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -     0/0/34      . 0.00 2647  0   4925    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -     0/0/271     . 0.00 2629  0   138957  0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -     0/0/180     . 0.00 2326  0   80106   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -     0/0/70      . 0.00 2648  0   27450   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -     0/0/55      . 0.00 2622  0   23711   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -     0/0/120     . 0.00 2404  0   47805   0.0   0.00  1.27   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -     0/0/41      . 0.00 2628  0   13053   0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -     0/0/343     . 0.00 2608  0   157003  0.0   0.00  4.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -     0/0/1852    . 0.00 2632  0   792927  0.0   0.00  30.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -     0/0/70      . 0.00 2645  0   19485   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -     0/0/207     . 0.00 2633  0   100344  0.0   0.00  2.84   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -     0/0/17      . 0.00 2634  0   3427    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -     0/0/61      . 0.00 2646  0   23416   0.0   0.00  0.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -     0/0/373     . 0.00 2486  0   143685  0.0   0.00  4.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16      . 0.00 4921  0   5601    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69      . 0.00 4895  0   32068   0.0   0.00  1.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94      . 0.00 4907  0   46144   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24      . 0.00 4905  0   7231    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902     . 0.00 4786  356 427396  0.0   0.00  16.37  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220     . 0.00 4917  0   104301  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20      . 0.00 4890  0   5450    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53      . 0.00 4784  352 26129   0.0   0.00  0.72   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18      . 0.00 5766  0   7494    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61      . 0.00 5602  0   26486   0.0   0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67      . 0.00 5825  0   37042   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14      . 0.00 5783  0   4755    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18      . 0.00 5829  0   8011    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13      . 0.00 5805  0   3968    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234     . 0.00 5790  0   126089  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570     . 0.00 5784  0   196325  0.0   0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249     . 0.00 4913  282 111456  0.0   0.00  3.97   102.90.98.148  http/1.1
   66-1 -     0/0/234     . 0.00 5792  0   130247  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13      . 0.00 5824  0   4952    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13      . 0.00 5778  0   5501    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9       . 0.00 5795  0   4783    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16      . 0.00 5810  0   9834    0.0   0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10      . 0.00 5804  0   3804    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6       . 0.00 5812  0   1625    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11      . 0.00 5768  0   3678    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10      . 0.00 5786  0   5547    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7       . 0.00 5787  0   2381    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7       . 0.00 5813  0   3573    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675     . 0.00 5782  0   351530  0.0   0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2       . 0.00 13397 0   641     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3       . 0.00 13385 0   1675    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 625
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 2...54)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 9114
   total entries replaced since starting: 0
   total entries expired since starting: 8488
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 32 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit