403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.03.03.txt
 ## swap threshold exceeded
## server overview
2025-11-10.03.03 load[0] mem[62/61] mysql[1/9] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1361         153          44         849         772
Swap:          1999        1305         694
 03:03:01 up  2:09,  0 users,  load average: 0.63, 0.77, 0.77
## system overview
top - 03:03:01 up  2:09,  0 users,  load average: 0.63, 0.77, 0.77
Tasks: 201 total,   7 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 43.8 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   138852 free,  1409520 used,   871928 buff/cache
KiB Swap:  2047996 total,   711420 free,  1336576 used.   774988 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1462212 239532   3340 S  18.8  9.9   2:19.51 /usr/sbin+
   482 dbus      20   0   58584   1332    648 S   6.2  0.1   0:04.34 /usr/bin/+
 78812 pactpay   20   0  476460  15968  10408 S   6.2  0.7   0:00.01 /opt/cpan+
 78824 nigeria   20   0  400652  15672   9960 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44420   3640   1704 R   0.0  0.2   0:11.36 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.66 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:09.24 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:01.18 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.10 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:01.29 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:01.13 [kworker/+
   357 root      20   0   40244   2940   2612 S   0.0  0.1   0:04.36 /usr/lib/+
   385 root      20   0   45352    236    116 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    516    384 S   0.0  0.0   0:00.70 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    988    592 S   0.0  0.0   0:01.12 /usr/lib/+
   494 rpc       20   0   69256    156      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    324    232 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    404    296 S   0.0  0.0   0:00.16 /usr/sbin+
   528 root      20   0  224276   7128   1332 S   0.0  0.3   0:00.19 queueproc+
   533 root      20   0  152780    132     88 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1460    824 D   0.0  0.1   0:01.89 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     64     60 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1324    624 S   0.0  0.1   0:03.94 /usr/sbin+
   562 root      20   0   24208     84     60 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    488    320 S   0.0  0.0   0:00.22 /usr/sbin+
   583 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     44     44 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3976    944 S   0.0  0.2   0:00.15 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.61 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  36696   5836 S   0.0  1.5   0:04.42 /usr/loca+
   941 root      20   0   51656   1124    736 S   0.0  0.0   0:00.13 /usr/sbin+
   942 root      20   0  153404    320    236 S   0.0  0.0   0:00.17 pure-ftpd+
   943 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    428    324 S   0.0  0.0   0:00.97 /usr/sbin+
   945 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1763112 265228    704 S   0.0 11.0   0:13.89 /usr/loca+
   950 root      20   0  436392  11328  11124 S   0.0  0.5   0:00.35 php-fpm: +
   952 named     20   0  718804  37160   2476 S   0.0  1.5   0:06.18 /usr/sbin+
   960 root      20   0  392856    776    592 S   0.0  0.0   0:00.32 php-fpm: +
   961 root      20   0  240976   2816   2088 S   0.0  0.1   0:02.14 /usr/sbin+
   962 root      20   0  397344   3224    652 S   0.0  0.1   0:01.65 php-fpm: +
   965 root      20   0  261416   6628   1688 S   0.0  0.3   0:02.03 cpsrvd (S+
   967 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   969 memcach+  20   0  342400    120    120 S   0.0  0.0   0:00.17 /usr/bin/+
   970 cpanelc+  20   0   10484   3492   2340 S   0.0  0.1   0:06.28 /usr/loca+
   982 root      20   0  385496    436    344 S   0.0  0.0   0:00.29 php-fpm: +
   985 root      20   0  386112    660    456 S   0.0  0.0   0:00.28 php-fpm: +
   986 systuser  20   0  113272     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   992 systuser  20   0  114016  12948   2684 S   0.0  0.5   0:01.90 /usr/loca+
   993 root      20   0  572372    804    216 S   0.0  0.0   0:00.75 /usr/bin/+
  1087 dovecot   20   0   10320    468    352 S   0.0  0.0   0:00.02 dovecot/a+
  1168 root      20   0  248160 117772   1232 S   0.0  4.9   0:03.72 /usr/loca+
  1181 systuser  20   0  157704   2892    848 S   0.0  0.1   0:00.05 SonarPush+
  1219 wp-tool+  20   0  410452  37044   1948 S   0.0  1.5   0:06.57 /usr/bin/+
  1220 wp-tool+  20   0  387528  13292   1668 S   0.0  0.5   0:00.15 /usr/bin/+
  1249 root      20   0  209356  12152   2488 S   0.0  0.5   0:00.84 tailwatchd
  1252 root      20   0  262228  22348   4492 S   0.0  0.9   0:00.55 cpdavd - +
  1253 root      20   0  167452   3340   1968 S   0.0  0.1   0:00.22 dnsadmin +
  1749 root      20   0  299272    772    392 S   0.0  0.0   0:00.21 php-fpm: +
  1799 root      38  18  130416   1432    708 S   0.0  0.1   0:00.01 cpanellog+
  1947 root      20   0  267112  30448   5004 S   0.0  1.3   0:00.87 /usr/sbin+
  2095 root      20   0  181688  10672   1196 S   0.0  0.4   0:07.10 lfd - sle+
  5800 root      20   0  183048   1000    440 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284    380    200 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056     92     20 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152    488      0 S   0.0  0.0   0:00.16 [kworker]
  6471 root      20   0  265416 131776   2808 S   0.0  5.4   0:01.32 spamd chi+
  6472 root      20   0  248160 116960    516 S   0.0  4.8   0:00.00 spamd chi+
 22574 root      20   0   12832   1392   1180 S   0.0  0.1   0:00.53 /usr/loca+
 22575 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.45 /usr/loca+
 22576 root      20   0   12876   1408   1180 S   0.0  0.1   0:00.49 /usr/loca+
 22578 dovenull  20   0   46912   3348   2320 S   0.0  0.1   0:00.08 dovecot/p+
 22579 dovenull  20   0   47428   4400   2980 S   0.0  0.2   0:00.07 dovecot/i+
 22580 root      20   0   10452   1172    800 S   0.0  0.0   0:00.06 dovecot/l+
 22581 dovenull  20   0   46912   3844   2788 S   0.0  0.2   0:00.09 dovecot/p+
 22582 dovenull  20   0   47372   4436   3028 S   0.0  0.2   0:00.08 dovecot/i+
 22583 root      20   0   24528  11748    868 S   0.0  0.5   0:00.05 dovecot/c+
 22584 dovecot   20   0   13572   1276    916 S   0.0  0.1   0:00.01 dovecot/s+
 22588 dovecot   20   0   41056   2272   1504 S   0.0  0.1   0:00.14 dovecot/a+
 22589 root      20   0   53252  10972   1588 S   0.0  0.5   0:00.04 /usr/loca+
 51787 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 57885 root      20   0       0      0      0 D   0.0  0.0   0:00.06 [kworker/+
 58963 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 60040 nobody    20   0  277864  36368   4776 S   0.0  1.5   0:02.01 /usr/sbin+
 60050 nobody    20   0  277992  36292   4704 S   0.0  1.5   0:01.71 /usr/sbin+
 62182 nobody    20   0  277672  36256   4800 S   0.0  1.5   0:01.47 /usr/sbin+
 64256 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 64444 nobody    20   0  278004  36232   4656 S   0.0  1.5   0:01.43 /usr/sbin+
 65450 nobody    20   0  277644  36160   4744 S   0.0  1.5   0:01.24 /usr/sbin+
 65782 nobody    20   0  278008  35996   4464 S   0.0  1.5   0:00.77 /usr/sbin+
 65916 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 65962 nobody    20   0  277864  36368   4756 S   0.0  1.5   0:01.34 /usr/sbin+
 65979 nobody    20   0  277676  36008   4548 S   0.0  1.5   0:01.30 /usr/sbin+
 69893 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 70512 nobody    20   0  277856  36132   4528 S   0.0  1.5   0:00.98 /usr/sbin+
 70651 nobody    20   0  277656  36008   4580 S   0.0  1.5   0:00.92 /usr/sbin+
 71595 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73506 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73649 nobody    20   0  277884  35960   4340 S   0.0  1.5   0:00.69 /usr/sbin+
 73659 nobody    20   0  277632  35844   4440 S   0.0  1.5   0:00.71 /usr/sbin+
 74374 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 74749 worencom  20   0   38468   3984   3032 S   0.0  0.2   0:00.00 dovecot/i+
 74985 nobody    20   0  278016  35924   4320 S   0.0  1.5   0:00.42 /usr/sbin+
 75077 nobody    20   0  278020  35920   4328 S   0.0  1.5   0:00.39 /usr/sbin+
 75654 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76737 nobody    20   0  277596  35088   3732 S   0.0  1.4   0:00.10 /usr/sbin+
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77282 root      20   0 1341636  10648    600 S   0.0  0.4   0:00.05 /usr/bin/+
 77322 root      20   0 1277312  15196    596 S   0.0  0.6   0:00.06 /usr/bin/+
 77701 root      20   0  123364    764    532 S   0.0  0.0   0:00.00 /usr/sbin+
 77936 nobody    20   0  277856  35388   3808 S   0.0  1.5   0:00.08 /usr/sbin+
 78152 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78222 nobody    20   0  277596  34884   3536 S   0.0  1.4   0:00.06 /usr/sbin+
 78227 healtho+  20   0  460204  71464   4348 S   0.0  3.0   0:06.36 php-fpm: +
 78546 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 78604 nigeria   20   0  397784   9268   3900 S   0.0  0.4   0:00.20 php-fpm: +
 78720 nigeria   20   0  397064   5768   2400 S   0.0  0.2   0:00.00 php-fpm: +
 78730 healtho+  20   0  397064   3260    576 S   0.0  0.1   0:00.00 php-fpm: +
 78733 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 78734 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 78735 root      20   0  261416   8544   2224 S   0.0  0.4   0:00.00 cpsrvd (S+
 78737 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 78746 cloudw    20   0  350316  16888  10452 S   0.0  0.7   0:00.02 /opt/cpan+
 78748 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 78749 root      20   0  183040   2208   1632 S   0.0  0.1   0:00.00 /usr/sbin+
 78750 root      20   0  183040   2208   1632 R   0.0  0.1   0:00.00 /usr/sbin+
 78751 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78752 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78753 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78754 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78755 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78756 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78757 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78758 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78760 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 78761 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 78762 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 78763 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 78764 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 78788 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 78789 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 78790 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 78791 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78792 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78794 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78795 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78797 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 78798 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 78799 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 78800 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 78808 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 78810 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 78814 saboakin  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 78822 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      51787  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/0:1]
root      57885  0.0  0.0      0     0 ?        R    02:30   0:00  \_ [kworker/1:4]
root      58963  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/0:2]
root      64256  0.0  0.0      0     0 ?        S    02:41   0:00  \_ [kworker/1:1]
root      65916  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/0:4]
root      69893  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:2]
root      71595  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:2]
root      73506  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:1]
root      74374  0.0  0.0      0     0 ?        D    02:56   0:00  \_ [kworker/0:3]
root      75654  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/1:0]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      78152  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44420  3640 ?        Ss   00:54   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40244  2940 ?        Ss   00:54   0:04 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   236 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   516 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   988 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58584  1332 ?        Ss   00:54   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256   156 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   324 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   404 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224276  7128 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   132 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1460 ?        Ds   00:54   0:01 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    64 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1324 ?        Ssl  00:54   0:03 /usr/sbin/nscd
root        562  0.0  0.0  24208    84 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   488 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048  1000 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284   380 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056    92 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      78748  0.0  0.0 183044  2144 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78762  0.0  0.0 113284  1212 ?        Ss   03:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      78763  0.0  0.0 108052   356 ?        S    03:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      78764  0.0  0.0 113288  1520 ?        S    03:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      78828  0.0  0.0 153840  2096 ?        R    03:03   0:00  |               \_ ps auxf
root      78750  0.0  0.0 183040  2208 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78751  0.0  0.0 183044  2144 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78797  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      78752  0.0  0.0 183044  2144 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78792  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      78753  0.0  0.0 183044  2140 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78789  0.0  0.0  20164   968 ?        Rs   03:03   0:00  |   \_ jailshell (cloudsms) [78810] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  78810  0.0  0.0      0     0 ?        Z    03:03   0:00  |       \_ [jailshell] <defunct>
root      78754  0.0  0.0 183044  2140 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78791  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      78755  0.0  0.0 183044  2140 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78794  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      78756  0.0  0.0 183044  2140 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78795  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      78757  0.0  0.0 183044  2140 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78799  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      78758  0.0  0.0 183044  2144 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78798  0.0  0.0  20164   968 ?        Ss   03:03   0:00  |   \_ jailshell (pactpay) [78808] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   78808  0.0  0.0  20164   260 ?        S    03:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   78812  0.0  0.6 476460 15968 ?        Sl   03:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      78760  0.0  0.0 183044  2140 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root      78790  0.0  0.0  20164   964 ?        Ss   03:03   0:00  |   \_ jailshell (nigeria) [78822] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   78822  0.0  0.0  20164   260 ?        S    03:03   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   78824  0.0  0.6 400652 15936 ?        S    03:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      78761  0.0  0.0 183040  2204 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root        583  0.0  0.0 108296    68 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    44 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3976 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.5 5654048 36696 ?       SLsl 00:54   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656  1124 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   468 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.1  46912  3348 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  47428  4400 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452  1172 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.1  46912  3844 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47372  4436 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.4  24528 11748 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572  1276 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41056  2272 ?        S    01:28   0:00  \_ dovecot/auth
worencom  74749  0.0  0.1  38468  3984 ?        S    02:56   0:00  \_ dovecot/imap
root      78546  0.0  0.1  60820  4508 ?        S    03:02   0:00  \_ dovecot/lmtp
root        942  0.0  0.0 153404   320 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   428 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      78733  0.0  0.2 157100  5076 ?        Ss   03:02   0:00  \_ sshd: unknown [priv]
sshd      78734  0.0  0.1 115644  2632 ?        S    03:02   0:00      \_ sshd: unknown [net]
systuser    945  0.0  0.0  13012    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    72 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.1 10.9 1763112 265228 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.4 436392 11328 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.5 718804 37160 ?        Ssl  00:54   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   776 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.1 240976  2816 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  3224 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  78227 11.3  2.9 460204 71464 ?        S    03:02   0:06  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   78604  0.8  0.3 397784  9268 ?        S    03:02   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   78720  0.0  0.2 397064  5768 ?        S    03:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  78730  0.0  0.1 397064  3260 ?        S    03:02   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        965  0.0  0.2 261416  6628 ?        Ss   00:54   0:02 cpsrvd (SSL) - waiting for connections                   
root      78735  0.0  0.3 261416  8544 ?        S    03:02   0:00  \_ cpsrvd (SSL) - waiting for connections                   
root      78737  0.0  0.0      0     0 ?        Z    03:02   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400   120 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3492 ?        Ss   00:54   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   436 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   660 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    80 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.5 114016 12948 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   804 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  4.8 248160 117772 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  5.4 265416 131776 ?       S    01:00   0:01  \_ spamd child
root       6472  0.0  4.8 248160 116960 ?       S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2892 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  1.5 410452 37044 ?        Ss   00:54   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.5 387528 13292 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.5 209356 12152 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  0.9 262228 22348 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1253  0.0  0.1 167452  3340 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   772 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1432 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8  9.8 1462212 239532 ?      Sl   00:54   2:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  1.2 267112 30448 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12832  1392 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12876  1408 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.4  53252 10972 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60040  0.1  1.5 277864 36368 ?        S    02:34   0:02  \_ /usr/sbin/httpd -k start
nobody    60050  0.0  1.4 277992 36292 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    62182  0.0  1.4 277672 36256 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    64444  0.1  1.4 278004 36232 ?        S    02:41   0:01  \_ /usr/sbin/httpd -k start
nobody    65450  0.1  1.4 277644 36160 ?        S    02:43   0:01  \_ /usr/sbin/httpd -k start
nobody    65782  0.0  1.4 278008 35996 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65962  0.1  1.5 277864 36368 ?        S    02:44   0:01  \_ /usr/sbin/httpd -k start
nobody    65979  0.1  1.4 277676 36008 ?        S    02:44   0:01  \_ /usr/sbin/httpd -k start
nobody    70512  0.1  1.4 277856 36132 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    70651  0.1  1.4 277656 36008 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    73649  0.1  1.4 277884 35960 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
nobody    73659  0.1  1.4 277632 35844 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    74985  0.1  1.4 278016 35924 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    75077  0.1  1.4 278020 35920 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
cloudw    78746  0.0  0.6 350316 16888 ?        S    03:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    76737  0.0  1.4 277596 35088 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    77936  0.0  1.4 277856 35388 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    78222  0.1  1.4 277596 34884 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.4 181688 10672 ?        Ss   00:54   0:07 lfd - sleeping
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   488 ?        S    01:00   0:00  \_ [kworker]
root      77282  0.0  0.4 1341636 10648 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      77322  0.0  0.6 1277312 15196 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      77701  0.0  0.0 123364   764 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 7727  Threads: 3  Questions: 909532  Slow queries: 0  Opens: 3985  Flush tables: 1  Open tables: 2000  Queries per second avg: 117.708
*************************** 1. row ***************************
     Id: 14207
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 14213
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `20` WHERE `phone`='2348143389193' LIMIT 1
*************************** 3. row ***************************
     Id: 14215
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 136.0.154.36 TIME_WAIT
      1 142.44.220.16 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.244.8.188 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.27.76.30 TIME_WAIT
      1 66.249.70.32 TIME_WAIT
      1 74.7.227.134 TIME_WAIT
      1 85.208.98.16 TIME_WAIT
      1 85.254.129.78 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.138.170 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 35.212.246.113 TIME_WAIT
     37 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 03:03:01 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 2 hours 8 minutes 43 seconds
   Server load: 0.63 0.77 0.77
   Total accesses: 32433 - Total Traffic: 616.7 MB - Total Duration: 14910730
   CPU Usage: u11.61 s4.89 cu322.21 cs223.05 - 7.27% CPU load
   4.2 requests/sec - 81.8 kB/second - 19.5 kB/request - 459.739 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_KKRWK_K_K.RK_.RK...K.K.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-2  73649 0/157/2045 _ 3.32 0    0   777842 0.0  2.64  31.55 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-2  62182 1/362/1960 K 5.41 1    394 870761 36.5 5.53  34.08 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=153232629 HTTP/1.1
   2-2  60040 1/474/1768 K 9.85 3    348 853845 35.5 7.07  34.16 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=799927243 HTTP/1.1
   3-2  74985 0/91/1726  R 1.71 1    411 818783 0.0  1.76  37.84 157.20.32.131  http/1.1
   4-2  76737 0/43/1946  W 0.25 0    0   823060 0.0  0.37  32.47 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-2  64444 8/321/1845 K 6.06 2    6   856592 42.9 5.58  33.24 144.76.19.157  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Imo&lga=Oru-east&ward=Akum
   6-2  60050 0/419/1502 _ 6.83 0    9   753985 0.0  6.41  35.27 35.172.125.172 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/images/blog/blog/ima
   7-2  70512 1/209/1486 K 4.48 0    350 703721 34.2 3.96  28.17 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=3952843062 HTTP/1.1
   8-2  77936 0/18/1450  _ 0.29 1    202 933737 0.0  0.32  46.27 23.27.76.30    http/1.1 nigeriadecide.org:443      GET /blog/inecs-response-to-newspaperdaily-independent-claim-of
   9-2  78222 3/15/1592  K 0.27 1    28  776932 24.1 0.27  29.28 51.83.11.108   http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   10-2 -     0/0/1226   . 0.00 145  0   609101 0.0  0.00  23.79 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-2 65782 0/261/1515 R 2.65 90   410 670552 0.0  2.67  26.61 47.128.26.92   http/1.1
   12-2 65450 2/280/1220 K 5.89 1    405 536861 66.3 4.53  22.09 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=3221707674 HTTP/1.1
   13-2 73659 0/162/1068 _ 3.36 0    338 548770 0.0  2.64  21.60 157.20.32.131  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-2 -     0/0/1243   . 0.00 35   0   570099 0.0  0.00  24.03 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-2 70651 0/206/1260 R 3.74 92   291 581306 0.0  3.60  25.50 47.128.26.92   http/1.1
   16-2 75077 2/89/738   K 1.59 0    408 339594 68.5 1.49  12.90 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=2352176362 HTTP/1.1
   17-2 -     0/0/418    . 0.00 698  0   145334 0.0  0.00  7.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 -     0/0/663    . 0.00 1004 0   336942 0.0  0.00  12.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-2 -     0/0/886    . 0.00 398  0   442577 0.0  0.00  17.24 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 65962 1/343/847  K 5.57 2    356 373920 34.0 5.34  14.18 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=1760485413 HTTP/1.1
   21-2 -     0/0/864    . 0.00 328  0   377639 0.0  0.00  13.96 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 65979 3/261/526  K 6.20 4    397 268614 97.8 5.18  9.25  66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=1556908231 HTTP/1.1
   23-2 -     0/0/617    . 0.00 621  0   245349 0.0  0.00  9.35  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/100    . 0.00 3371 0   37166  0.0  0.00  1.34  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/31     . 0.00 3373 0   5168   0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/46     . 0.00 3375 0   6117   0.0  0.00  0.25  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/47     . 0.00 3376 0   3811   0.0  0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/163    . 0.00 2858 0   67061  0.0  0.00  2.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/26     . 0.00 3369 0   3509   0.0  0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/301    . 0.00 3368 0   139777 0.0  0.00  6.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/57     . 0.00 5433 0   25684  0.0  0.00  0.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/47     . 0.00 5589 0   16198  0.0  0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/39     . 0.00 5587 0   6961   0.0  0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/197    . 0.00 5179 0   47049  0.0  0.00  5.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/41     . 0.00 5568 0   15983  0.0  0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/42     . 0.00 5569 0   10575  0.0  0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/316    . 0.00 4747 0   106128 0.0  0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/59     . 0.00 5441 0   27054  0.0  0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/22     . 0.00 5600 0   1654   0.0  0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/149    . 0.00 5272 0   69209  0.0  0.00  2.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/56     . 0.00 5577 0   11193  0.0  0.00  0.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/60     . 0.00 5599 0   33165  0.0  0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/26     . 0.00 5580 0   1149   0.0  0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/36     . 0.00 5598 0   5070   0.0  0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/30     . 0.00 5570 0   3132   0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/32     . 0.00 5440 0   20691  0.0  0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/34     . 0.00 5783 0   9383   0.0  0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/8      . 0.00 5857 0   989    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/57     . 0.00 5687 261 20913  0.0  0.00  0.84  66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 749
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...52)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 13520
   total entries replaced since starting: 0
   total entries expired since starting: 12769
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 40 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit