403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-05.03.45.txt
 ## swap threshold exceeded
## server overview
2025-11-05.03.45 load[4] mem[77/66] mysql[8/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1650          64         104         648         422
Swap:          1999        1363         636
 03:45:03 up  8:56,  0 users,  load average: 4.20, 1.21, 0.51
## system overview
top - 03:45:03 up  8:56,  0 users,  load average: 4.20, 1.21, 0.51
Tasks: 202 total,  10 running, 191 sleeping,   0 stopped,   1 zombie
%Cpu(s): 88.9 us, 11.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    67656 free,  1688872 used,   663772 buff/cache
KiB Swap:  2047996 total,   652028 free,  1395968 used.   434616 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  3714 mysql     20   0 1462276 337060   3144 S  50.0 13.9   7:14.76 /usr/sbin+
 13106 healtho+  20   0  461848  73796   4184 R  27.8  3.0   0:04.20 php-fpm: +
 13132 healtho+  20   0  457240  70156   4184 R  27.8  2.9   0:01.85 php-fpm: +
 13101 healtho+  20   0  464988  75948   4236 R  22.2  3.1   0:05.15 php-fpm: +
 13102 healtho+  20   0  461984  74328   4188 R  22.2  3.1   0:05.67 php-fpm: +
 13105 healtho+  20   0  461848  74124   4184 R  16.7  3.1   0:04.77 php-fpm: +
 13228 nigeria   20   0  400652  15928  10212 S  11.1  0.7   0:00.07 /opt/cpan+
 12908 nobody    20   0  277492  34728   3604 S   5.6  1.4   0:00.05 /usr/sbin+
 13317 cloudsms  20   0  396404  11308   7900 R   5.6  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44532   3636   1524 S   0.0  0.2   0:47.86 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.00 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:28.24 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:01.87 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.55 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   103 root      20   0       0      0      0 S   0.0  0.0   0:00.71 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.69 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   2132   1820 S   0.0  0.1   0:17.69 /usr/lib/+
   380 root      20   0   45352    476    328 S   0.0  0.0   0:00.35 /usr/lib/+
   408 root      16  -4   55532    488    356 S   0.0  0.0   0:02.82 /sbin/aud+
   410 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   510 rpc       20   0   69256    252    156 S   0.0  0.0   0:00.04 /sbin/rpc+
   517 dbus      20   0   58720   1600    796 S   0.0  0.1   0:16.59 /usr/bin/+
   522 nscd      20   0 1064132   1624    760 S   0.0  0.1   0:05.19 /usr/sbin+
   542 root      20   0   24760   1372    896 S   0.0  0.1   0:07.30 /usr/lib/+
   544 root      20   0  195208    140    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0   21540    496    388 S   0.0  0.0   0:00.75 /usr/sbin+
   548 polkitd   20   0  610540   1116    640 S   0.0  0.0   0:04.32 /usr/lib/+
   551 root      20   0   52852    392    280 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  224144   6156   1056 S   0.0  0.3   0:00.40 queueproc+
   553 root      20   0  152780    296    256 S   0.0  0.0   0:00.02 /usr/sbin+
   565 root      20   0    4388    164    160 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0   24208    152    132 S   0.0  0.0   0:00.00 /usr/sbin+
   573 root      20   0  124480    680    504 S   0.0  0.0   0:00.96 /usr/sbin+
   584 root      20   0  114704    248    248 S   0.0  0.0   0:00.02 /bin/bash
   585 root      20   0  108296    240    236 S   0.0  0.0   0:00.00 /sbin/age+
   593 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   637 mailnull  20   0   89120   3808    776 S   0.0  0.2   0:00.39 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:03.98 [loop0]
   713 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   714 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   753 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
  2886 memcach+  20   0  342400    268    268 S   0.0  0.0   0:00.72 /usr/bin/+
  2887 root      20   0  572372   1136    556 S   0.0  0.0   0:02.78 /usr/bin/+
  2888 systuser  20   0  113016   1608      0 S   0.0  0.1   0:00.01 /usr/loca+
  2889 root      20   0   51508    664    500 S   0.0  0.0   0:00.35 /usr/sbin+
  2892 root      20   0  445028   2788   2788 S   0.0  0.1   0:00.06 sw-engine+
  2894 systuser  20   0  114016  15300   2656 S   0.0  0.6   0:07.92 /usr/loca+
  2895 root      20   0  153404    476    392 S   0.0  0.0   0:00.76 pure-ftpd+
  2896 telegraf  20   0 5654304  37764   5548 S   0.0  1.6   0:17.42 /usr/loca+
  2898 systuser  20   0  112524   2072      0 S   0.0  0.1   0:00.02 /usr/loca+
  2900 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  2901 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  2902 root      20   0  111304    604    508 S   0.0  0.0   0:04.52 /usr/sbin+
  2910 root      20   0  386112   7296   2672 S   0.0  0.3   0:00.87 php-fpm: +
  2913 root      20   0  397344  10976   3784 S   0.0  0.5   0:05.22 php-fpm: +
  2914 named     20   0  858184  43160   1296 S   0.0  1.8   0:16.42 /usr/sbin+
  2915 root      20   0  261404   7416   1804 S   0.0  0.3   0:08.89 cpsrvd (S+
  2933 root      20   0  392856   8192   2604 S   0.0  0.3   0:00.84 php-fpm: +
  2934 root      20   0  314704   3652   2272 S   0.0  0.2   0:08.79 /usr/sbin+
  2939 root      20   0  385496   7716   2656 S   0.0  0.3   0:00.96 php-fpm: +
  2946 root      20   0 1763068 170056    544 S   0.0  7.0   0:19.51 /usr/loca+
  2953 root      20   0  436392  20892  13388 S   0.0  0.9   0:00.99 php-fpm: +
  2956 cpanelc+  20   0   10552   3688   2356 S   0.0  0.2   0:23.42 /usr/loca+
  3054 dovenull  20   0   47060   2060   1264 S   0.0  0.1   0:00.45 dovecot/p+
  3055 dovenull  20   0   47544   2964   1720 S   0.0  0.1   0:00.22 dovecot/i+
  3056 dovecot   20   0   10320    332    220 S   0.0  0.0   0:00.03 dovecot/a+
  3057 root      20   0   10452    704    496 S   0.0  0.0   0:00.38 dovecot/l+
  3058 dovenull  20   0   47052   2052   1288 S   0.0  0.1   0:00.61 dovecot/p+
  3059 dovenull  20   0   48148   3008   1328 S   0.0  0.1   0:00.37 dovecot/i+
  3066 root      20   0   24556   2636    500 S   0.0  0.1   0:00.17 dovecot/c+
  3071 dovecot   20   0   13568    744    508 S   0.0  0.0   0:00.06 dovecot/s+
  3130 systuser  20   0  157704   3048   1024 S   0.0  0.1   0:00.15 SonarPush+
  3140 root      20   0  248140 117116    872 S   0.0  4.8   0:06.64 /usr/loca+
  3148 dovecot   20   0   41056   1336    904 S   0.0  0.1   0:00.38 dovecot/a+
  3150 wp-tool+  20   0  410480  35604   1632 S   0.0  1.5   0:26.02 /usr/bin/+
  3151 wp-tool+  20   0  387556  13212   1620 S   0.0  0.5   0:00.32 /usr/bin/+
  3202 root      20   0  262224  22460   4540 S   0.0  0.9   0:03.25 cpdavd - +
  3203 root      20   0  167452   3084   1736 S   0.0  0.1   0:00.58 dnsadmin +
  3205 root      20   0  210316  13372   1548 S   0.0  0.6   0:04.09 tailwatchd
  3599 root      20   0  299272    752    388 S   0.0  0.0   0:00.91 php-fpm: +
  3640 root      38  18  130416   1504    760 S   0.0  0.1   0:00.09 cpanellog+
  3676 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
  3745 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
  3894 root      20   0  266984  29692   4480 S   0.0  1.2   0:01.42 /usr/sbin+
  5830 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  6152 nobody    20   0  277500  35552   4404 S   0.0  1.5   0:00.58 /usr/sbin+
  6977 root      20   0  263080 128456   1804 S   0.0  5.3   0:03.82 spamd chi+
  6978 root      20   0  248140 116656    472 S   0.0  4.8   0:00.01 spamd chi+
  8220 nobody    20   0  277468  35448   4328 S   0.0  1.5   0:00.38 /usr/sbin+
  8494 nobody    20   0  277440  35368   4284 S   0.0  1.5   0:00.26 /usr/sbin+
  8498 nobody    20   0  277704  35492   4208 S   0.0  1.5   0:00.26 /usr/sbin+
  8838 root      30  10  132964   3936    400 S   0.0  0.2   0:00.00 ConfigSer+
  8849 root      30  10  108056    296    220 S   0.0  0.0   0:00.00 sleep 2304
  8944 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  9055 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.59 [kworker]
 10561 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 10639 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11020 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11960 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 12532 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12909 nobody    20   0  277492  35176   4076 S   0.0  1.5   0:00.05 /usr/sbin+
 12970 nobody    20   0  277492  34964   3848 S   0.0  1.4   0:00.02 /usr/sbin+
 12977 nobody    20   0  277492  34368   3332 S   0.0  1.4   0:00.02 /usr/sbin+
 12978 nobody    20   0  277492  34708   3620 S   0.0  1.4   0:00.03 /usr/sbin+
 13030 nigeria   20   0  474232  17372   6624 S   0.0  0.7   0:00.31 php-fpm: +
 13114 nigeria   20   0  397784  11696   3896 S   0.0  0.5   0:00.20 php-fpm: +
 13139 root      20   0  157312   4860   3584 S   0.0  0.2   0:00.00 sshd: roo+
 13150 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: roo+
 13155 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13157 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13161 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13162 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13163 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13165 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13166 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13167 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13168 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13169 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13171 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13173 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 13174 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 13177 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
 13178 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 13180 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13181 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13182 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 13183 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13185 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 13187 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 13188 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 13191 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13195 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13199 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 13200 root      20   0  188200  11080   5148 S   0.0  0.5   0:00.01 /usr/loca+
 13206 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 13221 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 13222 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13233 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 13240 root      20   0  160224   2376   1636 S   0.0  0.1   0:00.00 top -n 2 +
 13264 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13311 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 13312 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13315 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 13319 root      20   0  113284    216      0 R   0.0  0.0   0:00.00 bash /usr+
 24647 root      20   0  182176  29504   1568 S   0.0  1.2   0:13.51 lfd - sle+
 41006 root      20   0   12776    964    756 S   0.0  0.0   0:00.37 /usr/loca+
 41007 root      20   0   12732    936    752 S   0.0  0.0   0:00.30 /usr/loca+
 41008 root      20   0   12800    976    756 S   0.0  0.0   0:00.35 /usr/loca+
 41009 root      20   0   53272  10636   1308 S   0.0  0.4   0:00.04 /usr/loca+
 48624 root      20   0  183056   1604   1040 S   0.0  0.1   0:00.00 /usr/sbin+
 48664 root      20   0  113284    628    448 S   0.0  0.0   0:00.00 /bin/sh -+
 48701 root      20   0  108056    296    220 S   0.0  0.0   0:00.00 sleep 5h +
 59768 cloudw    20   0  295104   8772   3116 R   0.0  0.4   0:26.23 /opt/cpan+
 87730 nobody    20   0  277676  36036   4700 S   0.0  1.5   0:01.75 /usr/sbin+
 87735 nobody    20   0  277608  35968   4704 S   0.0  1.5   0:01.16 /usr/sbin+
 89528 nobody    20   0  277576  35924   4700 S   0.0  1.5   0:01.26 /usr/sbin+
 95897 nobody    20   0  277700  36012   4664 S   0.0  1.5   0:00.96 /usr/sbin+
 96142 nobody    20   0  277868  36156   4664 S   0.0  1.5   0:01.11 /usr/sbin+
 96645 nobody    20   0  277612  35944   4676 S   0.0  1.5   0:01.24 /usr/sbin+
100669 root      20   0 1276356  11456    580 S   0.0  0.5   0:00.09 /usr/bin/+
100703 root      20   0 1277056  11976    588 S   0.0  0.5   0:00.08 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov04   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov04   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    Nov04   0:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov04   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov04   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov04   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov04   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [deferwq]
root        103  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov04   0:02  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov04   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov04   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ext4-rsv-conver]
root        410  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [xprtiod]
root        593  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov04   0:03  \_ [loop0]
root        713  0.0  0.0      0     0 ?        S    Nov04   0:00  \_ [jbd2/loop0-8]
root        714  0.0  0.0      0     0 ?        S<   Nov04   0:00  \_ [ext4-rsv-conver]
root        753  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/0:3]
root       3676  0.0  0.0      0     0 ?        S    03:16   0:00  \_ [kworker/1:3]
root       3745  0.0  0.0      0     0 ?        S    03:16   0:00  \_ [kworker/0:1]
root       5830  0.0  0.0      0     0 ?        S    03:23   0:00  \_ [kworker/0:5]
root       8944  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/1:0]
root      10561  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/u200:2]
root      10639  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/u200:3]
root      11020  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/1:2]
root      11960  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/0:0]
root      12532  0.0  0.0      0     0 ?        S    03:43   0:00  \_ [kworker/0:2]
root      13264  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44532  3636 ?        Ss   Nov04   0:47 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  2132 ?        Ss   Nov04   0:17 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   476 ?        Ss   Nov04   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   488 ?        S<sl Nov04   0:02 /sbin/auditd
rpc         510  0.0  0.0  69256   252 ?        Ss   Nov04   0:00 /sbin/rpcbind -w
dbus        517  0.0  0.0  58720  1600 ?        Ss   Nov04   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        522  0.0  0.0 1064132 1616 ?        Ssl  Nov04   0:05 /usr/sbin/nscd
root        542  0.0  0.0  24760  1372 ?        Ss   Nov04   0:07 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208   140 ?        Ssl  Nov04   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0  21540   496 ?        Ss   Nov04   0:00 /usr/sbin/irqbalance --foreground
polkitd     548  0.0  0.0 610540  1116 ?        Ssl  Nov04   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        551  0.0  0.0  52852   392 ?        Ss   Nov04   0:00 /usr/sbin/smartd -n -q never
root        552  0.0  0.2 224144  6156 ?        Ss   Nov04   0:00 queueprocd - waiting up to 60s to process a task
root        553  0.0  0.0 152780   296 ?        Ss   Nov04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        565  0.0  0.0   4388   164 ?        Ss   Nov04   0:00 /usr/sbin/acpid
root        571  0.0  0.0  24208   152 ?        Ss   Nov04   0:00 /usr/sbin/atd -f
root        573  0.0  0.0 124480   680 ?        Ss   Nov04   0:00 /usr/sbin/crond -n
root      48624  0.0  0.0 183056  1604 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48664  0.0  0.0 113284   628 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48701  0.0  0.0 108056   296 ?        S    01:00   0:00  |       \_ sleep 5h 12m
root      13155  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13174  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      13177  0.0  0.0 113284  1476 ?        S    03:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      13157  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13187  0.0  0.0 113284  1208 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      13199  0.0  0.0 108052   360 ?        S    03:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      13206  0.0  0.0 113288  1520 ?        S    03:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      13320  0.0  0.0 153840  2096 ?        R    03:45   0:00  |               \_ ps auxf
root      13161  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13191  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      13162  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13188  0.0  0.0  20164   980 ?        Ss   03:45   0:00  |   \_ jailshell (cloudsms) [13312] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  13312  0.0  0.0  20164   260 ?        S    03:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  13315  0.0  0.0 113284  1212 ?        S    03:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  13317  0.0  0.6 400652 15668 ?        R    03:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      13163  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13181  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      13165  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13183  0.0  0.0  20164   984 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      13322  0.0  0.2  38648  6504 ?        R    03:45   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      13166  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13195  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      13167  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13180  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      13168  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13185  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      13200  1.0  0.4 188200 11080 ?        S    03:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      13240  0.0  0.0 160224  2376 ?        S    03:45   0:00  |           \_ top -n 2 -b -c
root      13169  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13178  0.0  0.0  20164   964 ?        Ss   03:45   0:00  |   \_ jailshell (pactpay) [13222] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13222  0.0  0.0  20164   260 ?        S    03:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13233  1.0  0.7 476724 17484 ?        S    03:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      13171  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      13182  0.0  0.0  20164   964 ?        Ss   03:45   0:00      \_ jailshell (nigeria) [13221] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13221  0.0  0.0  20164   264 ?        S    03:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13228  7.0  0.6 400652 15928 ?        S    03:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        584  0.0  0.0 114704   248 ttyS0    Ss+  Nov04   0:00 /bin/bash
root        585  0.0  0.0 108296   240 tty1     Ss+  Nov04   0:00 /sbin/agetty --noclear tty1 linux
mailnull    637  0.0  0.1  89120  3808 ?        Ss   Nov04   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+   2886  0.0  0.0 342400   268 ?        Ssl  Nov04   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       2887  0.0  0.0 572372  1136 ?        Ssl  Nov04   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   2888  0.0  0.0 113016  1608 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       2889  0.0  0.0  51508   636 ?        Ss   Nov04   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   3054  0.0  0.0  47060  2052 ?        S    Nov04   0:00  \_ dovecot/pop3-login
dovenull   3055  0.0  0.1  47544  2904 ?        S    Nov04   0:00  \_ dovecot/imap-login
dovecot    3056  0.0  0.0  10320   328 ?        S    Nov04   0:00  \_ dovecot/anvil
root       3057  0.0  0.0  10452   700 ?        S    Nov04   0:00  \_ dovecot/log
dovenull   3058  0.0  0.0  47052  2044 ?        S    Nov04   0:00  \_ dovecot/pop3-login
dovenull   3059  0.0  0.1  48148  2960 ?        S    Nov04   0:00  \_ dovecot/imap-login
root       3066  0.0  0.1  24556  2600 ?        S    Nov04   0:00  \_ dovecot/config
dovecot    3071  0.0  0.0  13568   732 ?        S    Nov04   0:00  \_ dovecot/stats
dovecot    3148  0.0  0.0  41056  1304 ?        S    Nov04   0:00  \_ dovecot/auth
root       2892  0.0  0.1 445028  2788 ?        Ss   Nov04   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   2894  0.0  0.6 114016 15300 ?        Ssl  Nov04   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       2895  0.0  0.0 153404   476 ?        Ss   Nov04   0:00 pure-ftpd (SERVER)
telegraf   2896  0.0  1.5 5654304 37764 ?       SLsl Nov04   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   2898  0.0  0.0 112524  2072 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser   2900  0.0  0.0  10132    44 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   2901  0.0  0.0  14068    44 ?        Ssl  Nov04   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       2902  0.0  0.0 111304   604 ?        Ss   Nov04   0:04 /usr/sbin/sshd -D
root      13139  0.0  0.2 157312  4860 ?        Ss   03:44   0:00  \_ sshd: root [priv]
sshd      13150  0.0  0.1 115644  2624 ?        S    03:44   0:00      \_ sshd: root [net]
root       2910  0.0  0.3 386112  7296 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       2913  0.0  0.4 397344 10976 ?        Ss   Nov04   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   13030  1.2  0.7 474232 17372 ?        S    03:44   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  13101 36.8  3.1 465244 76888 ?        R    03:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  13102 40.5  3.0 461984 74328 ?        R    03:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  13105 36.8  3.0 461848 74124 ?        R    03:44   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  13106 35.0  3.0 461848 73796 ?        R    03:44   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   13114  1.8  0.4 397784 11696 ?        S    03:44   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  13132 31.3  2.8 457240 70156 ?        R    03:44   0:01  \_ php-fpm: pool health_oyostate_gov_ng
named      2914  0.0  1.7 858184 43160 ?        Ssl  Nov04   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       2915  0.0  0.3 261404  7388 ?        Ss   Nov04   0:08 cpsrvd (SSL) - waiting for connections                   
root      13173  0.0  0.0      0     0 ?        Z    03:45   0:00  \_ [cpaneld - servi] <defunct>
root       2933  0.0  0.3 392856  8192 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       2934  0.0  0.1 314704  3652 ?        Ssl  Nov04   0:08 /usr/sbin/rsyslogd -n
root       2939  0.0  0.3 385496  7716 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       2946  0.0  7.0 1763068 170056 ?      Ssl  Nov04   0:19 /usr/local/cpanel/3rdparty/bin/clamd -F
root       2953  0.0  0.8 436392 20892 ?        Ss   Nov04   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+   2956  0.0  0.1  10552  3688 ?        Rs   Nov04   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   3130  0.0  0.1 157704  3048 ?        S    Nov04   0:00 SonarPush 0.6.12 [sleeping]
root       3140  0.0  4.8 248140 117116 ?       Ss   Nov04   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6977  0.0  5.3 263080 128456 ?       S    Nov04   0:03  \_ spamd child
root       6978  0.0  4.8 248140 116656 ?       S    Nov04   0:00  \_ spamd child
wp-tool+   3150  0.0  1.4 410480 35604 ?        Ss   Nov04   0:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   3151  0.0  0.5 387556 13212 ?        Ss   Nov04   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       3202  0.0  0.9 262224 22436 ?        Ss   Nov04   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       3203  0.0  0.1 167452  3084 ?        Ss   Nov04   0:00 dnsadmin - dormant mode
root       3205  0.0  0.5 210316 13360 ?        Ss   Nov04   0:04 tailwatchd
root       3599  0.0  0.0 299272   752 ?        Ss   Nov04   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       3640  0.0  0.0 130416  1504 ?        SN   Nov04   0:00 cpanellogd - sleeping for logs
mysql      3714  1.3 13.9 1462276 336952 ?      Sl   Nov04   7:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       3894  0.0  1.2 266984 29692 ?        Ss   Nov04   0:01 /usr/sbin/httpd -k start
root      41006  0.0  0.0  12776   964 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      41007  0.0  0.0  12732   936 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      41008  0.0  0.0  12800   976 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      41009  0.0  0.4  53272 10636 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    87730  0.0  1.4 277676 36036 ?        S    02:35   0:01  \_ /usr/sbin/httpd -k start
nobody    87735  0.0  1.4 277608 35932 ?        S    02:35   0:01  \_ /usr/sbin/httpd -k start
nobody    89528  0.0  1.4 277576 35924 ?        S    02:40   0:01  \_ /usr/sbin/httpd -k start
nobody    95897  0.0  1.4 277700 36012 ?        S    02:48   0:00  \_ /usr/sbin/httpd -k start
nobody    96142  0.0  1.4 277868 36120 ?        S    02:48   0:01  \_ /usr/sbin/httpd -k start
nobody    96645  0.0  1.4 277612 35944 ?        S    02:48   0:01  \_ /usr/sbin/httpd -k start
nobody     6152  0.0  1.4 277500 35552 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody     8220  0.0  1.4 277468 35448 ?        S    03:30   0:00  \_ /usr/sbin/httpd -k start
nobody     8494  0.0  1.4 277440 35368 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody     8498  0.0  1.4 277704 35492 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody    12908  0.1  1.4 277492 34728 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    12909  0.1  1.4 277492 35176 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    12970  0.0  1.4 277492 34964 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    12977  0.0  1.4 277492 34368 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody    12978  0.1  1.4 277492 34708 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
oysipao+   9045  0.0  0.0   3148   416 ?        Ss   Nov04   0:00 [kworker]
oysipao+   9055  0.0  0.0   3152   492 ?        S    Nov04   0:00  \_ [kworker]
root      24647  0.1  1.2 182176 29504 ?        Ss   00:00   0:13 lfd - sleeping
cloudw    59768  0.3  0.3 295104  8772 ?        S    01:25   0:26 /opt/cpanel/ea-php74/root/usr/bin/php -f /tmp/httpd.conf
root     100669  0.0  0.4 1276356 11456 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root     100703  0.0  0.4 1277056 11976 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root       8838  0.0  0.1 132964  3936 ?        SN   03:33   0:00 ConfigServer Version Check
root       8849  0.0  0.0 108056   296 ?        SN   03:33   0:00  \_ sleep 2304
## mysql stats
Uptime: 32204  Threads: 8  Questions: 2651884  Slow queries: 0  Opens: 10320  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.346
*************************** 1. row ***************************
     Id: 33760
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 33761
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 33763
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 33766
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 5. row ***************************
     Id: 33767
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 33769
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 33774
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 33778
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 107.180.224.51 TIME_WAIT
      1 114.119.133.35 TIME_WAIT
      1 114.119.149.43 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 138.226.16.240 TIME_WAIT
      1 142.147.180.239 TIME_WAIT
      1 148.113.128.219 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 176.32.195.85 TIME_WAIT
      1 195.40.107.129 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.93.246.93 TIME_WAIT
      1 40.77.167.58 TIME_WAIT
      1 45.145.212.252 TIME_WAIT
      1 54.39.89.192 TIME_WAIT
      1 85.254.140.103 TIME_WAIT
      1 88.216.47.124 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.155.170 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.164.195.17 TIME_WAIT
      2 52.167.144.141 TIME_WAIT
      2 80.82.77.202 TIME_WAIT
      4 95.215.0.144 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 05-Nov-2025 03:45:03 WAT
   Restart Time: Tuesday, 04-Nov-2025 18:48:25 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 8 hours 56 minutes 38 seconds
   Server load: 4.20 1.21 0.51
   Total accesses: 42510 - Total Traffic: 612.6 MB - Total Duration: 12464525
   CPU Usage: u7.41 s3.09 cu203.45 cs88.64 - .94% CPU load
   1.32 requests/sec - 19.5 kB/second - 14.8 kB/request - 293.214 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

_W.WCWWWWKWWWW...L....W.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req    Dur   Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-1  95897 0/339/3551 _ 2.80 0    0    982819  0.0  3.26  51.00 176.32.195.85   http/1.1 theforge.com.ng:443        GET /aaa9 HTTP/1.1
   1-1  96142 0/397/3378 W 2.83 1    0    1394674 0.0  3.70  56.03 45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   2-1  -     0/0/3774   . 0.00 14   0    840687  0.0  0.00  53.31 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-1  12908 0/25/2638  W 0.04 0    0    880106  0.0  0.10  28.15 45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   4-1  6152  1/297/3630 C 1.84 0    1922 988530  2.2  2.05  57.73 45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   5-1  96645 0/515/2869 W 4.08 1    0    1019206 0.0  18.49 71.14 45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   6-1  8220  0/156/3057 W 0.62 2    0    1114857 0.0  2.95  47.07 31.132.53.250   http/1.1 health.oyostate.gov.ng:443 GET /oyo-govt-to-upgrade-66-phcs-for-better-healthcare-delivery
   7-1  12909 0/27/2533  W 0.04 0    0    646862  0.0  0.11  37.69 162.120.184.200 http/1.1 health.oyostate.gov.ng:443 GET /about-us/ HTTP/1.1
   8-1  8494  0/98/3011  W 0.47 1    0    674462  0.0  2.38  33.14 45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   9-1  12970 1/16/2653  K 0.02 2    975  907407  31.2 0.08  38.14 208.240.29.250  http/1.1 nigeriadecide.org:443      GET /INDEPENDENT_DEMOCRATS.php HTTP/1.1
   10-1 89528 0/439/2506 W 2.57 0    0    561282  0.0  4.89  29.61 45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   11-1 8498  0/91/867   W 0.51 0    0    293882  0.0  0.81  9.29  45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   12-1 12977 0/10/1678  W 0.02 1    0    278424  0.0  0.03  16.68 45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   13-1 12978 0/14/671   W 0.03 1    0    252323  0.0  0.04  6.89  45.88.97.192    http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   14-1 -     0/0/856    . 0.00 4138 0    352953  0.0  0.00  24.58 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/770    . 0.00 4151 0    533329  0.0  0.00  9.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 -     0/0/745    . 0.00 4137 0    188645  0.0  0.00  12.83 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-1 87730 1/641/962  L 8.01 0    0    157463  0.6  5.21  8.09  176.32.195.85   http/1.1 theforge.com.ng:443        GET / HTTP/1.0
   18-1 -     0/0/206    . 0.00 4150 0    56017   0.0  0.00  1.87  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-1 -     0/0/117    . 0.00 3792 0    24762   0.0  0.00  1.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-1 -     0/0/32     . 0.00 4143 0    6777    0.0  0.00  0.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-1 -     0/0/18     . 0.00 4153 0    98      0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-1 87735 0/403/405  W 3.64 0    0    148488  0.0  6.55  6.56  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   23-1 -     0/0/810    . 0.00 4149 0    82231   0.0  0.00  3.96  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 -     0/0/4      . 0.00 4152 0    5       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1 -     0/0/640    . 0.00 3689 0    64385   0.0  0.00  6.73  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-1 -     0/0/5      . 0.00 4142 0    9       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1 -     0/0/50     . 0.00 3848 0    5239    0.0  0.00  0.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1 -     0/0/5      . 0.00 4140 0    21      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-1 -     0/0/2      . 0.00 4157 0    3       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 -     0/0/2      . 0.00 4156 0    2       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-1 -     0/0/2      . 0.00 4155 0    3       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-1 -     0/0/63     . 0.00 3685 0    8556    0.0  0.00  0.55  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 690
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 22 seconds, (range: 0...97)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 11664
   total entries replaced since starting: 0
   total entries expired since starting: 10962
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 30 miss
   total removes since starting: 12 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit