403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.01.06.txt
 ## swap threshold exceeded
## server overview
2025-11-07.01.06 load[0] mem[67/64] mysql[9/10] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1475         112          82         775         627
Swap:          1999        1340         659
 01:06:02 up  6:16,  0 users,  load average: 0.90, 0.64, 0.72
## system overview
top - 01:06:02 up  6:16,  0 users,  load average: 0.90, 0.64, 0.72
Tasks: 196 total,   9 running, 186 sleeping,   0 stopped,   1 zombie
%Cpu(s): 85.3 us, 14.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   107808 free,  1518432 used,   794060 buff/cache
KiB Swap:  2047996 total,   675572 free,  1372424 used.   634804 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1759 mysql     20   0 1458320 245668   3684 S  50.0 10.2   7:51.46 /usr/sbin+
 52684 healtho+  20   0  447512  60228   4220 R  31.2  2.5   0:00.92 php-fpm: +
 52631 healtho+  20   0  462892  76120   4348 R  25.0  3.1   0:05.09 php-fpm: +
 52690 healtho+  20   0  441368  52968   4220 R  25.0  2.2   0:00.53 php-fpm: +
 52678 healtho+  20   0  453656  66152   4224 R  18.8  2.7   0:01.23 php-fpm: +
 52679 healtho+  20   0  455192  67860   4220 R  12.5  2.8   0:01.39 php-fpm: +
 52742 nigeria   20   0  400652  15936  10220 S   6.2  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44396   3648   1704 S   0.0  0.2   0:32.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.00 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.20 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:27.80 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.43 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.28 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:01.75 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:01.92 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.15 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   2184   1888 S   0.0  0.1   0:12.74 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    500    372 S   0.0  0.0   0:02.14 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 S   0.0  0.1   0:11.61 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.02 /sbin/rpc+
   515 root      20   0   52852    276    172 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4100   1020 S   0.0  0.2   0:00.30 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:02.98 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:05.12 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.52 /usr/sbin+
   526 root      20   0  152780    180    136 S   0.0  0.0   0:00.01 /usr/sbin+
   532 nscd      20   0  861368   1292    692 S   0.0  0.1   0:04.83 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.63 /usr/sbin+
   569 root      20   0   24208     52     28 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3984    948 S   0.0  0.2   0:00.32 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.27 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13052   2240 S   0.0  0.5   0:05.21 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.49 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:03.21 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  36024   5840 S   0.0  1.5   0:12.34 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:01.97 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.48 pure-ftpd+
   963 named     20   0  859124  40788   2108 S   0.0  1.7   0:12.27 /usr/sbin+
   965 root      20   0  397344  15076   9820 S   0.0  0.6   0:05.21 php-fpm: +
   970 root      20   0  436392  24328  16828 S   0.0  1.0   0:00.73 php-fpm: +
   983 root      20   0  290128   3044   1980 S   0.0  0.1   0:06.50 /usr/sbin+
   992 root      20   0  392856  11892   6300 S   0.0  0.5   0:00.61 php-fpm: +
   994 root      20   0  261552   7568   1756 S   0.0  0.3   0:07.46 cpsrvd (S+
   995 cpanelc+  20   0   10528   3460   2300 S   0.0  0.1   0:17.80 /usr/loca+
   999 root      20   0  386112  10792   6168 S   0.0  0.4   0:00.65 php-fpm: +
  1000 root      20   0 1763064 200516    556 S   0.0  8.3   0:14.01 /usr/loca+
  1009 root      20   0  385496  10964   5904 S   0.0  0.5   0:00.89 php-fpm: +
  1075 dovenull  20   0   47064   2684   1856 S   0.0  0.1   0:00.43 dovecot/p+
  1076 dovenull  20   0   47472   3252   2072 S   0.0  0.1   0:00.25 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.04 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.28 dovecot/l+
  1079 dovenull  20   0   47048   2196   1436 S   0.0  0.1   0:00.35 dovecot/p+
  1080 dovenull  20   0   47672   3248   1916 S   0.0  0.1   0:00.34 dovecot/i+
  1087 root      20   0   24528   2124    376 S   0.0  0.1   0:00.14 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.05 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.11 SonarPush+
  1150 wp-tool+  20   0  387556  13496   1856 S   0.0  0.6   0:00.25 /usr/bin/+
  1151 wp-tool+  20   0  410480  35972   2020 S   0.0  1.5   0:18.61 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.41 dovecot/a+
  1182 root      20   0  248280 116580    800 S   0.0  4.8   0:05.50 /usr/loca+
  1235 root      20   0  167452   4248   2880 S   0.0  0.2   0:00.40 dnsadmin +
  1238 root      20   0  183900   6448   3216 S   0.0  0.3   0:01.13 cpdavd - +
  1239 root      20   0  209916  13296   2464 S   0.0  0.5   0:01.91 tailwatchd
  1684 root      38  18  130416   1448    716 S   0.0  0.1   0:00.05 cpanellog+
  1953 root      20   0  266984  30840   5664 S   0.0  1.3   0:01.38 /usr/sbin+
  2038 root      20   0  299272    560    392 S   0.0  0.0   0:00.64 php-fpm: +
  5242 root      20   0  262088 127856   2688 S   0.0  5.3   0:02.40 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.40 [kworker]
 28586 root      20   0  181160  29196   2220 S   0.0  1.2   0:03.72 lfd - sle+
 34611 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 38249 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 40028 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 45429 root      20   0   12792   1384   1188 S   0.0  0.1   0:00.08 /usr/loca+
 45430 root      20   0   12732   1368   1188 S   0.0  0.1   0:00.06 /usr/loca+
 45431 root      20   0   12808   1396   1188 S   0.0  0.1   0:00.07 /usr/loca+
 45432 root      20   0   53252  11852   2472 S   0.0  0.5   0:00.05 /usr/loca+
 45433 nobody    20   0  277852  35948   4400 S   0.0  1.5   0:01.13 /usr/sbin+
 45434 nobody    20   0  277896  35796   4300 S   0.0  1.5   0:00.82 /usr/sbin+
 45462 nobody    20   0  277612  35776   4496 S   0.0  1.5   0:00.97 /usr/sbin+
 45467 nobody    20   0  277728  35920   4508 S   0.0  1.5   0:00.85 /usr/sbin+
 45491 nobody    20   0  277900  35900   4388 S   0.0  1.5   0:01.00 /usr/sbin+
 46027 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46045 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 46065 nobody    20   0  277620  35880   4504 S   0.0  1.5   0:00.93 /usr/sbin+
 46781 nobody    20   0  277884  35860   4516 S   0.0  1.5   0:00.74 /usr/sbin+
 47056 nobody    20   0  277896  35880   4496 S   0.0  1.5   0:00.72 /usr/sbin+
 47613 nobody    20   0  277904  35960   4436 S   0.0  1.5   0:00.65 /usr/sbin+
 49193 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49707 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 50184 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 50249 root      20   0  108056    356    284 S   0.0  0.0   0:00.00 sleep 4h +
 50313 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50725 root      20   0 1276100  10520    600 S   0.0  0.4   0:00.05 /usr/bin/+
 50761 root      20   0 1277312  11956    600 S   0.0  0.5   0:00.06 /usr/bin/+
 50968 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51034 nobody    20   0  277508  35272   4140 S   0.0  1.5   0:00.23 /usr/sbin+
 51756 nobody    20   0  277756  35204   3852 S   0.0  1.5   0:00.13 /usr/sbin+
 51962 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52253 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 52586 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 52587 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 52596 nobody    20   0  277416  34624   3588 S   0.0  1.4   0:00.02 /usr/sbin+
 52677 nigeria   20   0  397064   8220   2444 S   0.0  0.3   0:00.00 php-fpm: +
 52680 nobody    20   0  277504  34228   3208 S   0.0  1.4   0:00.00 /usr/sbin+
 52683 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 52685 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 52686 nobody    20   0  277496  33660   2812 S   0.0  1.4   0:00.00 /usr/sbin+
 52687 nobody    20   0  277496  33912   3044 S   0.0  1.4   0:00.00 /usr/sbin+
 52691 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52692 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52694 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52697 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52699 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52700 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52701 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52702 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52703 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 52705 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52712 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52713 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 52715 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52716 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 52717 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52718 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52721 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 52722 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52723 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 52727 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52733 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 52734 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 52736 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52739 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 52741 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 52762 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 52769 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 52788 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 52791 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52794 root      20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
 52795 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 92578 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:27  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      92578  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kworker/u200:1]
root      34611  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/0:0]
root      38249  0.0  0.0      0     0 ?        S    00:26   0:00  \_ [kworker/0:2]
root      40028  0.0  0.0      0     0 ?        S    00:32   0:00  \_ [kworker/0:1]
root      46027  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:2]
root      46045  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/1:4]
root      49193  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/1:0]
root      49707  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/0:3]
root      50313  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:0]
root      50968  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/1:3]
root      51962  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44396  3648 ?        Ss   Nov06   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40244  2184 ?        Ss   Nov06   0:12 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   500 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Ss   Nov06   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   276 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4100 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:05 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   180 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 861368  1292 ?        Ssl  Nov06   0:04 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2144 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   356 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      52691  0.0  0.0 183048  2140 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52715  0.0  0.0 113284  1212 ?        Ss   01:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      52733  0.0  0.0 108052   356 ?        S    01:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      52739  0.0  0.0 113288  1520 ?        S    01:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      52796  0.0  0.0 153840  2096 ?        R    01:06   0:00  |               \_ ps auxf
root      52692  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52721  0.0  0.0  20164   988 ?        Ss   01:06   0:00  |   \_ jailshell (cloudsms) [52791] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  52791  0.0  0.0  20164   260 ?        S    01:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  52795  0.0  0.0 113284  1212 ?        S    01:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  52798  0.0  0.0 113284   184 ?        R    01:06   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      52694  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52716  0.0  0.0  20164   992 ?        Ss   01:06   0:00  |   \_ jailshell (cloudsms) [52794] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  52794  0.0  0.0  20164   264 ?        S    01:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  52797  0.0  0.0 113284  1212 ?        S    01:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  52799  0.0  0.0 113284   184 ?        R    01:06   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      52697  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52727  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      52699  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52718  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      52700  0.0  0.0 183048  2140 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52717  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      52701  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52722  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      52702  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52712  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      52703  0.0  0.0 183048  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52723  0.0  0.0  20164   972 ?        Ss   01:06   0:00  |   \_ jailshell (pactpay) [52736] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52736  0.0  0.0  20164   260 ?        S    01:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52741  0.5  0.7 476724 17484 ?        S    01:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      52705  0.0  0.0 183048  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      52713  0.0  0.0  20164   972 ?        Ss   01:06   0:00      \_ jailshell (nigeria) [52734] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52734  0.0  0.0  20164   264 ?        S    01:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52742  3.0  0.6 400652 15936 ?        S    01:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    52 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3984 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2684 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  3252 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47048  2196 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47672  3248 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2124 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
root      52253  0.0  0.1  60820  4508 ?        S    01:04   0:00  \_ dovecot/lmtp
root      52762  0.0  0.1  41052  2728 ?        S    01:06   0:00  \_ dovecot/auth -w
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13052 ?        Ssl  Nov06   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:03 /usr/sbin/sshd -D
root      52586  0.0  0.1 111304  4268 ?        Ss   01:05   0:00  \_ sshd: [accepted]
sshd      52587  0.0  0.1 115644  2624 ?        S    01:05   0:00  |   \_ sshd: [net]
root      52683  0.0  0.2 157100  5072 ?        Ss   01:05   0:00  \_ sshd: unknown [priv]
sshd      52685  0.0  0.1 115644  2628 ?        S    01:05   0:00      \_ sshd: unknown [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 36024 ?       SLsl Nov06   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.6 859124 40788 ?        Ssl  Nov06   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.6 397344 15076 ?        Ss   Nov06   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  52631 25.4  3.1 462892 76120 ?        R    01:05   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   52677  0.0  0.3 397064  8220 ?        S    01:05   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  52678 31.2  2.7 455704 67736 ?        R    01:05   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  52679 35.2  2.8 455192 67860 ?        R    01:05   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  52684 23.5  2.6 449560 63132 ?        R    01:05   0:00  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  52690 27.5  2.3 443416 55864 ?        R    01:06   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        970  0.0  1.0 436392 24328 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.1 290128  3044 ?        Ssl  Nov06   0:06 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 11892 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7568 ?        Ss   Nov06   0:07 cpsrvd (SSL) - waiting for connections                   
root      52769  0.0  0.0      0     0 ?        Z    01:06   0:00  \_ [cpsrvd (SSL) - ] <defunct>
cpanelc+    995  0.0  0.1  10528  3460 ?        Ss   Nov06   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10792 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  8.2 1763064 200516 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 10964 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13496 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35972 ?        Ss   Nov06   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116580 ?       Ss   Nov06   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.2 262088 127856 ?       S    Nov06   0:02  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4248 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  0.2 183900  6448 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.5 209916 13296 ?        Ss   Nov06   0:01 tailwatchd
root       1684  0.0  0.0 130416  1448 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.0 10.1 1458320 245668 ?      Sl   Nov06   7:51 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30840 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12792  1384 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1368 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12808  1396 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11852 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    45433  0.0  1.4 277852 35948 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    45434  0.0  1.4 277896 35796 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
nobody    45462  0.0  1.4 277612 35776 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
nobody    45467  0.0  1.4 277728 35920 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
nobody    45491  0.0  1.4 277900 35900 ?        S    00:47   0:01  \_ /usr/sbin/httpd -k start
nobody    46065  0.0  1.4 277620 35880 ?        S    00:49   0:00  \_ /usr/sbin/httpd -k start
nobody    46781  0.0  1.4 277884 35860 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    47056  0.0  1.4 277896 35880 ?        S    00:51   0:00  \_ /usr/sbin/httpd -k start
nobody    47613  0.0  1.4 277904 35960 ?        S    00:52   0:00  \_ /usr/sbin/httpd -k start
nobody    51034  0.0  1.4 277508 35272 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    51756  0.0  1.4 277756 35204 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    52596  0.0  1.4 277416 34624 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    52680  0.0  1.4 277504 34228 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    52686  0.0  1.3 277496 33660 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
nobody    52687  0.0  1.4 277496 33912 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   560 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181160 29196 ?        Ss   00:00   0:03 lfd - sleeping
root      50725  0.0  0.4 1276100 10520 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      50761  0.0  0.4 1277312 11956 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 22588  Threads: 8  Questions: 3612811  Slow queries: 0  Opens: 6425  Flush tables: 1  Open tables: 2000  Queries per second avg: 159.943
*************************** 1. row ***************************
     Id: 52735
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 52736
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 52737
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 52740
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 5. row ***************************
     Id: 52742
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 52744
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 52750
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 52752
   User: cloudsms_robocal
   Host: localhost
     db: cloudsms_robocall
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM voice_queue where server = '1' LIMIT 500
*************************** 9. row ***************************
     Id: 52754
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.128.67.187 TIME_WAIT
      1 54.39.0.65 TIME_WAIT
      1 54.39.210.254 TIME_WAIT
      1 54.39.6.118 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 170.106.72.93 TIME_WAIT
     66 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 01:06:03 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 6 hours 16 minutes 20 seconds
   Server load: 0.90 0.64 0.72
   Total accesses: 67742 - Total Traffic: 822.2 MB - Total Duration: 28028283
   CPU Usage: u6.62 s2.94 cu341.02 cs191.27 - 2.4% CPU load
   3 requests/sec - 37.3 kB/second - 12.4 kB/request - 413.75 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

WWRWWWWWWKWRW..WK...............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                        Request
   0-1  52596 0/16/5200  W 0.02 1     0   2086271 0.0   0.17  64.10 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-1  51034 0/79/5286  W 0.52 0     0   2181259 0.0   1.03  58.34 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-1  45462 0/304/5223 R 2.95 0     20  2035497 0.0   3.58  61.50 181.214.173.113 http/1.1 health.oyostate.gov.ng:443
   3-1  51756 0/49/4554  W 0.29 2     0   1801770 0.0   0.55  49.96 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   4-1  45467 0/300/4462 W 2.01 1     0   1853130 0.0   2.87  52.23 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   5-1  45491 0/401/4373 W 2.74 0     0   1667839 0.0   3.50  54.08 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-1  52680 0/2/4101   W 0.00 0     0   1636585 0.0   0.01  48.94 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   7-1  46065 0/357/4280 W 2.91 2     0   1601547 0.0   3.44  54.57 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   8-1  46781 0/238/3563 W 2.02 2     0   1474013 0.0   2.76  44.31 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   9-1  47056 5/231/4059 K 1.98 2     680 1646774 162.8 2.40  50.31 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=1464945892 HTTP/1.1
   10-1 52686 0/1/2987   W 0.00 0     0   1241932 0.0   0.00  39.66 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   11-1 52687 0/2/3027   R 0.00 0     0   1345962 0.0   0.02  45.77 66.249.70.33    http/1.1 support.cloudware.ng:443
   12-1 45433 0/371/3107 W 3.82 1     0   1236992 0.0   10.92 47.83 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   13-1 -     0/0/1280   . 0.00 780   0   533766  0.0   0.00  18.21 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1 -     0/0/1864   . 0.00 753   0   890353  0.0   0.00  20.55 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 47613 0/194/1467 W 2.31 0     0   715123  0.0   2.62  14.33 181.214.173.113 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   16-1 45434 1/280/1879 K 3.65 3     496 726063  35.0  2.57  19.91 66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=501012372 HTTP/1.1
   17-0 -     0/0/1004   . 0.00 5049  0   496611  0.0   0.00  10.60 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/543    . 0.00 5050  0   273251  0.0   0.00  6.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/48     . 0.00 5053  0   31753   0.0   0.00  0.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/542    . 0.00 5062  0   256184  0.0   0.00  5.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/717    . 0.00 5060  0   355802  0.0   0.00  10.38 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1023   . 0.00 2689  0   475279  0.0   0.00  13.16 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/258    . 0.00 4702  0   140369  0.0   0.00  3.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/174    . 0.00 5055  0   87052   0.0   0.00  1.77  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/331    . 0.00 4476  0   117833  0.0   0.00  3.49  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/282    . 0.00 9099  0   128233  0.0   0.00  3.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/490    . 0.00 8192  0   227604  0.0   0.00  3.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179    . 0.00 9087  0   92180   0.0   0.00  1.94  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/156    . 0.00 9586  0   83779   0.0   0.00  1.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00 10265 0   56      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00 9097  0   132085  0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00 10251 0   1509    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 10272 0   1381    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00 10254 0   53900   0.0   0.00  1.65  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 10263 0   1494    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00 9610  0   68720   0.0   0.00  1.46  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00 10276 0   157495  0.0   0.00  3.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 10273 4   712     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00 10266 0   1369    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00 9789  0   43685   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00 10275 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 10245 0   735     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 10262 0   54      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00 9277  0   124261  0.0   0.00  2.80  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 514
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 0...122)
   index usage: 9%, cache usage: 12%
   total entries stored since starting: 1750
   total entries replaced since starting: 0
   total entries expired since starting: 1236
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 1 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit