403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.10.54.txt
 ## swap threshold exceeded
## server overview
2025-11-22.10.54 load[0] mem[68/62] mysql[5/25] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1501         160          40         702         637
Swap:          1999        1370         629
 10:54:02 up  3:55,  0 users,  load average: 0.80, 0.90, 0.78
## system overview
top - 10:54:02 up  3:55,  0 users,  load average: 0.80, 0.90, 0.78
Tasks: 204 total,   5 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 73.5 us, 20.6 sy,  0.0 ni,  5.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   154428 free,  1541784 used,   724088 buff/cache
KiB Swap:  2047996 total,   644348 free,  1403648 used.   647992 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464484 257980   3148 S 125.0 10.7   3:02.70 /usr/sbin+
 66952 nigeria   20   0  404052  16144  10384 R  18.8  0.7   0:00.04 /opt/cpan+
   356 root      20   0   39500   5064   4820 S   6.2  0.2   0:07.72 /usr/lib/+
 66822 root      20   0  162436   5692   4324 R   6.2  0.2   0:00.01 sshd: roo+
 66937 pactpay   20   0  480124  17668  11880 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44396   3416   1556 S   0.0  0.1   0:18.80 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.84 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:14.05 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.58 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.29 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:27.86 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.28 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.81 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.31 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.86 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    456    336 S   0.0  0.0   0:01.20 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.31 /usr/sbin+
   485 root      20   0   24712   1152    792 S   0.0  0.0   0:03.35 /usr/lib/+
   486 root      20   0  152780    100     60 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224280   6060   1644 S   0.0  0.3   0:00.29 queueproc+
   488 root      20   0   52852    180    112 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    932    548 S   0.0  0.0   0:02.02 /usr/lib/+
   498 dbus      20   0   58748   1360    604 S   0.0  0.1   0:07.74 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1228    584 S   0.0  0.1   0:10.41 /usr/sbin+
   554 root      20   0   24208     12      8 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    544    392 S   0.0  0.0   0:00.40 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3496    568 S   0.0  0.1   0:00.38 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.26 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    744    276 S   0.0  0.0   0:01.29 /usr/bin/+
   920 root      20   0  257360   4716   4156 S   0.0  0.2   0:03.86 /usr/sbin+
   926 root      20   0 1902000 396584    928 S   0.0 16.4   0:37.21 /usr/loca+
   927 named     20   0 1185864  36840   2120 S   0.0  1.5   0:07.70 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.31 /usr/bin/+
   931 root      20   0  389508    388    296 S   0.0  0.0   0:00.45 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.64 sw-engine+
   939 root      20   0  439788    336    244 S   0.0  0.0   0:00.50 php-fpm: +
   941 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    304    216 S   0.0  0.0   0:00.43 php-fpm: +
   944 cpanelc+  20   0   10132   3460   2456 S   0.0  0.1   0:11.30 /usr/loca+
   946 systuser  20   0  114016   9776   2428 S   0.0  0.4   0:03.55 /usr/loca+
   949 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    272    188 S   0.0  0.0   0:00.46 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.61 /usr/sbin+
   960 root      20   0   51508    648    460 S   0.0  0.0   0:00.24 /usr/sbin+
   962 root      20   0  261156   5968   1504 S   0.0  0.2   0:02.05 cpsrvd (S+
   965 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1484    612 S   0.0  0.1   0:01.74 php-fpm: +
   973 root      20   0  153404    260    176 S   0.0  0.0   0:00.30 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.04 /usr/bin/+
   975 root      20   0 1276356   6256      0 S   0.0  0.3   0:25.56 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  34356   5272 S   0.0  1.4   0:08.09 /usr/loca+
  1079 dovenull  20   0   47136   1732   1032 S   0.0  0.1   0:00.45 dovecot/p+
  1080 dovenull  20   0   47392   2240   1452 S   0.0  0.1   0:00.21 dovecot/i+
  1081 dovecot   20   0   10320    272    164 S   0.0  0.0   0:00.13 dovecot/a+
  1082 root      20   0   10452    548    344 S   0.0  0.0   0:00.29 dovecot/l+
  1083 dovenull  20   0   47300   2300   1692 S   0.0  0.1   0:00.57 dovecot/p+
  1084 dovenull  20   0   47424   2332   1496 S   0.0  0.1   0:00.24 dovecot/i+
  1090 root      20   0   24572   1984    420 S   0.0  0.1   0:00.12 dovecot/c+
  1091 dovecot   20   0   13568    636    436 S   0.0  0.0   0:00.04 dovecot/s+
  1153 dovecot   20   0   41156   1504    988 S   0.0  0.1   0:00.80 dovecot/a+
  1158 systuser  20   0  157704   2824    844 S   0.0  0.1   0:00.08 SonarPush+
  1177 wp-tool+  20   0  387528   3276   1372 S   0.0  0.1   0:00.20 /usr/bin/+
  1178 wp-tool+  20   0  412368  23208   1368 S   0.0  1.0   0:04.66 /usr/bin/+
  1261 root      20   0  183900   5728   2496 S   0.0  0.2   0:00.92 cpdavd - +
  1262 root      20   0  208424  20908   4132 S   0.0  0.9   0:01.94 tailwatchd
  1263 root      20   0  167452   3820   2448 S   0.0  0.2   0:00.32 dnsadmin +
  1662 root      38  18  130416   1376    704 S   0.0  0.1   0:00.04 cpanellog+
  1690 root      20   0  299272    432    272 S   0.0  0.0   0:00.39 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:01.21 /usr/sbin+
  1929 root      20   0   12760    316    216 S   0.0  0.0   0:01.44 /usr/loca+
  1930 root      20   0   12732    288    212 S   0.0  0.0   0:01.28 /usr/loca+
  1931 root      20   0   12768    328    220 S   0.0  0.0   0:01.33 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182800   9412   1116 S   0.0  0.4   0:12.12 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.28 [kworker]
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
 32544 nobody    20   0  277604  20292   4744 S   0.0  0.8   0:04.37 /usr/sbin+
 37541 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 41477 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 46894 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 49155 nobody    20   0  277716  20300   4852 S   0.0  0.8   0:01.96 /usr/sbin+
 49528 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 49545 nobody    20   0  277716  19376   4692 S   0.0  0.8   0:02.17 /usr/sbin+
 50287 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 50707 nobody    20   0  277908  20140   4760 S   0.0  0.8   0:01.92 /usr/sbin+
 52844 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 53541 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54737 nobody    20   0  277520  18956   4540 S   0.0  0.8   0:01.46 /usr/sbin+
 54752 nobody    20   0  277780  19124   4456 S   0.0  0.8   0:01.39 /usr/sbin+
 55379 nobody    20   0  277648  18796   4452 S   0.0  0.8   0:01.31 /usr/sbin+
 55395 nobody    20   0  277908  19236   4484 S   0.0  0.8   0:01.32 /usr/sbin+
 57442 nobody    20   0  277536  18356   4332 S   0.0  0.8   0:00.81 /usr/sbin+
 59858 nobody    20   0  277912  18432   4192 S   0.0  0.8   0:00.75 /usr/sbin+
 59928 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61134 nobody    20   0  277528  18112   4188 S   0.0  0.7   0:00.56 /usr/sbin+
 61397 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62111 nobody    20   0  277676  18244   3904 S   0.0  0.8   0:00.49 /usr/sbin+
 62391 root      20   0   41052   2288   1616 S   0.0  0.1   0:00.01 dovecot/a+
 63544 nobody    20   0  277584  18024   4084 S   0.0  0.7   0:00.33 /usr/sbin+
 63965 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64275 root      20   0  248028 121972   5372 S   0.0  5.0   0:02.78 /usr/loca+
 65134 nobody    20   0  277908  17808   3872 S   0.0  0.7   0:00.22 /usr/sbin+
 65167 nobody    20   0  277908  17924   3876 S   0.0  0.7   0:00.22 /usr/sbin+
 65349 root      20   0  258800 125764   3224 S   0.0  5.2   0:00.38 spamd chi+
 65350 root      20   0  248028 118048   1484 S   0.0  4.9   0:00.00 spamd chi+
 66238 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66363 nobody    20   0  277520  17212   3708 S   0.0  0.7   0:00.12 /usr/sbin+
 66402 root      20   0  111304   4276   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 66410 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 66550 root      20   0  111304   4276   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 66606 healtho+  20   0  462688  69464   4220 S   0.0  2.9   0:03.35 php-fpm: +
 66681 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.00 php-fpm: +
 66695 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 66696 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 66823 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 66858 healtho+  20   0  431968  38556   4228 S   0.0  1.6   0:00.35 php-fpm: +
 66871 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 66875 nobody    20   0  277236  16276   3124 S   0.0  0.7   0:00.00 /usr/sbin+
 66886 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 66889 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66890 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66891 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66892 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66893 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66896 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66897 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66898 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66900 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66901 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66903 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66905 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 66906 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 66907 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 66909 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66910 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 66915 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66916 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 66919 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66921 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66922 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66923 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 66924 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66925 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66933 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66951 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 66954 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 66972 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 66978 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66981 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 66982 cloudsms  20   0  400380  12152   8340 R   0.0  0.5   0:00.00 /opt/cpan+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:01.07 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    06:58   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    06:58   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    06:58   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    06:58   0:27  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   06:58   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   06:58   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   06:58   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   06:58   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   06:58   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    06:58   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   06:58   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    08:37   0:01  \_ [kworker/u200:0]
root      37541  0.0  0.0      0     0 ?        S    10:12   0:00  \_ [kworker/0:0]
root      41477  0.0  0.0      0     0 ?        S    10:18   0:00  \_ [kworker/1:5]
root      46894  0.0  0.0      0     0 ?        S    10:26   0:00  \_ [kworker/1:4]
root      49528  0.0  0.0      0     0 ?        S    10:30   0:00  \_ [kworker/0:3]
root      50287  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:2]
root      52844  0.0  0.0      0     0 ?        S    10:35   0:00  \_ [kworker/1:1]
root      53541  0.0  0.0      0     0 ?        S    10:36   0:00  \_ [kworker/0:2]
root      59928  0.0  0.0      0     0 ?        S    10:45   0:00  \_ [kworker/1:0]
root      61397  0.0  0.0      0     0 ?        S    10:47   0:00  \_ [kworker/0:4]
root      63965  0.0  0.0      0     0 ?        S    10:50   0:00  \_ [kworker/u200:1]
root      66238  0.0  0.0      0     0 ?        S    10:53   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44396  3416 ?        Ss   06:58   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  39500  5064 ?        Ss   06:58   0:07 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   06:58   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   456 ?        S<sl 06:58   0:01 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   06:58   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1152 ?        Ss   06:58   0:03 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   100 ?        Ss   06:58   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224280  6060 ?        Ss   06:58   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   180 ?        Ss   06:58   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   932 ?        Ssl  06:58   0:02 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1360 ?        Ss   06:58   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   06:58   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   06:58   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  06:58   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1228 ?        Ssl  06:58   0:10 /usr/sbin/nscd
root        554  0.0  0.0  24208    12 ?        Ss   06:58   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   544 ?        Ss   06:58   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    07:01   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   07:01   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    07:01   0:00  |       \_ sleep 4h 19m
root      66889  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66905  0.0  0.0 113284  1212 ?        Ss   10:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      66906  0.0  0.0 108052   360 ?        S    10:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      66907  0.0  0.0 113288  1516 ?        S    10:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      66986  0.0  0.0 153840  2100 ?        R    10:54   0:00  |               \_ ps auxf
root      66890  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66921  0.0  0.0  20164   808 ?        Ss   10:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      66891  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66915  0.0  0.0  20164   804 ?        Ss   10:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      66892  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66919  0.0  0.0  20164   808 ?        Ss   10:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      66893  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66909  0.0  0.0  20164   808 ?        Ss   10:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      66896  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66922  0.0  0.0  20164   808 ?        Ss   10:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      66897  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66916  0.0  0.0  20164   992 ?        Ss   10:54   0:00  |   \_ jailshell (cloudsms) [66978] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  66978  0.0  0.0  20164   260 ?        S    10:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  66981  0.0  0.0 113284  1212 ?        S    10:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  66982  0.0  0.6 404052 15876 ?        S    10:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      66898  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66925  0.0  0.0  20164   804 ?        Ss   10:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      66900  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66924  0.0  0.0  20164   804 ?        Ss   10:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      66901  0.0  0.0 183044  2148 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66910  0.0  0.0  20164   968 ?        Ss   10:54   0:00  |   \_ jailshell (pactpay) [66933] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66933  0.0  0.0  20164   260 ?        S    10:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66937  0.0  0.7 480124 17668 ?        S    10:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      66903  0.0  0.0 183044  2144 ?        S    10:54   0:00  \_ /usr/sbin/CROND -n
root      66923  0.0  0.0  20164   968 ?        Ss   10:54   0:00      \_ jailshell (nigeria) [66951] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66951  0.0  0.0  20164   256 ?        S    10:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66952  0.0  0.6 404052 16144 ?        S    10:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  06:58   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  06:58   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3496 ?        Ss   06:58   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   744 ?        Ssl  06:58   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 257360  4716 ?        Ssl  06:58   0:03 /usr/sbin/rsyslogd -n
root        926  0.2 16.3 1902000 396584 ?      Ssl  06:58   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.5 1185864 36840 ?       Ssl  06:58   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  06:58   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   388 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   06:58   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  66871  0.0  0.0 445028   324 ?        S    10:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   336 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932    68 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   304 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10132  3460 ?        Ss   06:58   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.4 114016  9776 ?        Ssl  06:58   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    68 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   272 ?        Ss   06:58   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   06:58   0:01 /usr/sbin/sshd -D
root      66402  0.0  0.1 111304  4276 ?        Ss   10:53   0:00  \_ sshd: [accepted]
sshd      66410  0.0  0.1 115644  2628 ?        S    10:53   0:00  |   \_ sshd: [net]
root      66550  0.0  0.1 111304  4276 ?        Ss   10:53   0:00  \_ sshd: [accepted]
root      66695  0.0  0.2 157100  5080 ?        Ss   10:53   0:00  \_ sshd: unknown [priv]
sshd      66696  0.0  0.1 115644  2628 ?        S    10:53   0:00  |   \_ sshd: unknown [net]
root      66822  0.2  0.2 162436  5836 ?        Ss   10:53   0:00  \_ sshd: root [priv]
sshd      66823  0.0  0.1 115644  2632 ?        S    10:53   0:00      \_ sshd: root [net]
root        960  0.0  0.0  51508   648 ?        Ss   06:58   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136  1732 ?        S    06:58   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392  2240 ?        S    06:58   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   272 ?        S    06:58   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   548 ?        S    06:58   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300  2300 ?        S    06:58   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  47424  2332 ?        S    06:58   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24572  1984 ?        S    06:58   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   636 ?        S    06:58   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1504 ?        S    06:58   0:00  \_ dovecot/auth
root      62391  0.0  0.0  41052  2288 ?        S    10:49   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261156  5968 ?        Ss   06:58   0:02 cpsrvd (SSL) - waiting for connections                   
root      66886  0.0  0.0      0     0 ?        Z    10:54   0:00  \_ [cpsrvd (SSL) - ] <defunct>
systuser    965  0.0  0.0  14068    44 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1484 ?        Ss   06:58   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  66606 12.4  2.8 462688 69464 ?        S    10:53   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   66681  0.0  0.1 400460  4336 ?        S    10:53   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  66858  8.7  1.5 431968 38556 ?        S    10:53   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        973  0.0  0.0 153404   260 ?        Ss   06:58   0:00 pure-ftpd (SERVER)
root        974  0.1  0.1 1277312 4164 ?        Ssl  06:58   0:28 /usr/bin/checkstatus
root        975  0.1  0.2 1276356 6256 ?        Ssl  06:58   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  06:58   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 34356 ?       SLsl 06:58   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1158  0.0  0.1 157704  2824 ?        S    06:58   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  3276 ?        Ss   06:58   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 23208 ?        Ss   06:58   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  5728 ?        Ss   06:58   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.8 208424 20908 ?        Ss   06:58   0:01 tailwatchd
root       1263  0.0  0.1 167452  3820 ?        Ss   06:58   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1376 ?        SN   06:58   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   432 ?        Ss   06:58   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2 10.6 1464484 257980 ?      Sl   06:58   3:02 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   06:58   0:01 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12760   316 ?        S    06:58   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   288 ?        S    06:58   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12768   328 ?        S    06:58   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    06:58   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32544  0.1  0.8 277604 20292 ?        S    10:05   0:04  \_ /usr/sbin/httpd -k start
nobody    49155  0.1  0.8 277716 20300 ?        S    10:30   0:01  \_ /usr/sbin/httpd -k start
nobody    49545  0.1  0.8 277716 19376 ?        S    10:30   0:02  \_ /usr/sbin/httpd -k start
nobody    50707  0.1  0.8 277908 20140 ?        S    10:32   0:01  \_ /usr/sbin/httpd -k start
nobody    54737  0.1  0.7 277520 18956 ?        S    10:38   0:01  \_ /usr/sbin/httpd -k start
nobody    54752  0.1  0.7 277780 19124 ?        S    10:38   0:01  \_ /usr/sbin/httpd -k start
nobody    55379  0.1  0.7 277648 18796 ?        S    10:39   0:01  \_ /usr/sbin/httpd -k start
nobody    55395  0.1  0.7 277908 19236 ?        S    10:39   0:01  \_ /usr/sbin/httpd -k start
nobody    57442  0.1  0.7 277536 18356 ?        S    10:42   0:00  \_ /usr/sbin/httpd -k start
nobody    59858  0.1  0.7 277912 18432 ?        S    10:45   0:00  \_ /usr/sbin/httpd -k start
cloudw    66954  0.0  0.6 353712 15972 ?        S    10:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    61134  0.1  0.7 277528 18112 ?        S    10:47   0:00  \_ /usr/sbin/httpd -k start
nobody    62111  0.1  0.7 277676 18244 ?        S    10:48   0:00  \_ /usr/sbin/httpd -k start
nobody    63544  0.1  0.0      0     0 ?        Z    10:50   0:00  \_ [httpd] <defunct>
nobody    65134  0.1  0.7 277908 17808 ?        S    10:51   0:00  \_ /usr/sbin/httpd -k start
nobody    65167  0.1  0.7 277908 17924 ?        S    10:51   0:00  \_ /usr/sbin/httpd -k start
nobody    66363  0.2  0.7 277520 17212 ?        S    10:53   0:00  \_ /usr/sbin/httpd -k start
nobody    66875  0.0  0.6 277236 16276 ?        S    10:53   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.3 182800  9412 ?        Ss   06:58   0:12 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   07:01   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    36 ?        S    07:01   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   09:30   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   09:30   0:00  \_ sleep 15214
root      64275  1.2  5.0 248028 121972 ?       Ss   10:50   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      65349  0.2  5.1 258800 125764 ?       S    10:51   0:00  \_ spamd child
root      65350  0.0  4.8 248028 118048 ?       S    10:51   0:00  \_ spamd child
## mysql stats
Uptime: 35831  Threads: 3  Questions: 1039327  Slow queries: 0  Opens: 5429  Flush tables: 1  Open tables: 2000  Queries per second avg: 29.006
*************************** 1. row ***************************
     Id: 18508
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 18514
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 18521
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.48 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.233.59.216 TIME_WAIT
      1 51.161.65.190 TIME_WAIT
      1 66.249.66.167 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     43 159.65.137.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 10:54:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 57 minutes 7 seconds
   Server load: 0.80 0.90 0.78
   Total accesses: 64095 - Total Traffic: 1.6 GB - Total Duration: 162703111
   CPU Usage: u14.34 s6.27 cu817.11 cs652.93 - 4.16% CPU load
   1.79 requests/sec - 46.9 kB/second - 26.2 kB/request - 2538.47 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

K_RKK_C__.KK__._W._....K........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  49545 1/404/3258  K 9.18  3     368 1663054  34.1  9.53  80.14 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=2900573878 HTTP/1.1
   1-0  55379 0/304/3342  _ 5.27  0     26  1621053  0.0   6.85  89.55 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue1.php HTTP/1.1
   2-0  55395 0/245/3245  R 5.34  1     25  1651665  0.0   5.90  84.78 159.65.137.58   http/1.1 health.oyostate.gov.ng:443
   3-0  59858 3/138/3108  K 2.99  0     392 1750703  92.2  3.07  81.11 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=1314954435 HTTP/1.1
   4-0  66363 2/21/3253   K 0.49  4     347 45078492 66.6  0.55  80.12 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=2770736501 HTTP/1.1
   5-0  50707 0/356/3014  _ 8.12  0     0   1446436  0.0   8.65  70.58 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  63544 1/61/3294   C 1.32  0     0   1531793  0.2   1.44  78.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  57442 0/165/3020  _ 3.10  0     342 1439764  0.0   3.83  71.03 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=1118632007 HTTP/1.1
   8-0  66875 0/1/3123    _ 0.00  0     388 1483526  0.0   0.01  79.68 159.65.137.58   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-0  -     0/0/2851    . 0.00  87    0   44878364 0.0   0.00  69.42 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 61134 54/126/2242 K 2.94  1     27  1088951  359.4 1.99  53.14 217.182.195.225 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   11-0 54737 2/283/2893  K 6.04  2     304 1516747  69.5  8.56  89.86 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=44562147 HTTP/1.1
   12-0 62111 0/95/2203   _ 1.90  0     24  1051264  0.0   2.05  52.55 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue5.php HTTP/1.1
   13-0 65134 0/40/2963   _ 0.87  0     20  1570807  0.0   0.93  75.18 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   14-0 -     0/0/2293    . 0.00  89    0   1453574  0.0   0.00  57.96 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 65167 0/43/1927   _ 1.11  0     25  993412   0.0   0.91  64.15 3.227.180.70    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/images/images
   16-0 54752 0/262/1867  W 5.72  0     0   936705   0.0   5.97  45.58 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 -     0/0/1387    . 0.00  23004 0   718864   0.0   0.00  34.98 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 49155 0/399/2463  _ 7.36  0     344 1055943  0.0   9.14  70.58 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=1285122561 HTTP/1.1
   19-0 -     0/0/1105    . 0.00  90    0   585406   0.0   0.00  27.45 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/851     . 0.00  22703 0   412146   0.0   0.00  19.54 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1451    . 0.00  23126 0   793961   0.0   0.00  37.29 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1812    . 0.00  23550 0   915125   0.0   0.00  44.11 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 32544 2/818/1667  K 18.29 0     401 44438953 68.1  19.46 40.04 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3887993723 HTTP/1.1
   24-0 -     0/0/438     . 0.00  23507 0   245547   0.0   0.00  11.59 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/181     . 0.00  23127 0   106820   0.0   0.00  4.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/302     . 0.00  23547 0   163792   0.0   0.00  10.38 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/184     . 0.00  23552 0   70902    0.0   0.00  3.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179     . 0.00  23315 0   121763   0.0   0.00  4.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/765     . 0.00  23551 0   452473   0.0   0.00  35.26 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/519     . 0.00  23558 0   266267   0.0   0.00  11.90 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/609     . 0.00  26847 0   309233   0.0   0.00  15.78 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/11      . 0.00  26837 0   3774     0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00  26849 0   1828     0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/117     . 0.00  26423 0   46396    0.0   0.00  2.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/146     . 0.00  26861 0   57340    0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/240     . 0.00  26833 0   105059   0.0   0.00  5.69  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00  26860 0   4588     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/102     . 0.00  26425 0   37924    0.0   0.00  1.98  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/196     . 0.00  26376 3   51541    0.0   0.00  2.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/203     . 0.00  26133 0   91622    0.0   0.00  4.31  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00  26840 0   2066     0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/12      . 0.00  26836 0   5210     0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00  26859 0   13       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/158     . 0.00  26379 0   66237    0.0   0.00  3.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/522     . 0.00  26743 0   184884   0.0   0.00  9.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/2       . 0.00  33650 0   4        0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/3       . 0.00  33617 0   766      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00  33644 0   48       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00  33615 0   10       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00  33600 0   695      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00  33593 0   3150     0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00  33596 0   538      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/13      . 0.00  33594 0   8196     0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00  33607 0   519      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/1       . 0.00  33631 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/110     . 0.00  33201 0   48080    0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00  33485 0   13507    0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/12      . 0.00  33603 0   7269     0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/6       . 0.00  33587 0   1848     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00  33640 0   1        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/48      . 0.00  33478 0   10684    0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00  33612 0   7        0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/1       . 0.00  33638 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/5       . 0.00  33599 0   1750     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00  33636 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00  33637 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  33614 0   6        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00  33588 0   859      0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/74      . 0.00  33356 0   36843    0.0   0.00  1.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/149     . 0.00  32992 0   74918    0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00  33632 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00  33635 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/6       . 0.00  33591 0   3305     0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/6       . 0.00  33586 0   2230     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  33634 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/1       . 0.00  33633 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/40      . 0.00  33495 0   15854    0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/1       . 0.00  33639 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00  33630 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 967
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...38)
   index usage: 17%, cache usage: 22%
   total entries stored since starting: 47077
   total entries replaced since starting: 0
   total entries expired since starting: 46097
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 124 miss
   total removes since starting: 13 hit, 12 miss
Youez - 2016 - github.com/yon3zu
LinuXploit