403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.02.54.txt
 ## swap threshold exceeded
## server overview
2025-11-08.02.54 load[0] mem[59/79] mysql[1/12] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1300         189          69         874         808
Swap:          1999        1621         378
 02:54:02 up  8:04,  0 users,  load average: 0.71, 0.96, 1.23
## system overview
top - 02:54:02 up  8:04,  0 users,  load average: 0.71, 0.96, 1.23
Tasks: 198 total,   3 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 79.4 us, 17.6 sy,  0.0 ni,  2.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   206960 free,  1318432 used,   894908 buff/cache
KiB Swap:  2047996 total,   387836 free,  1660160 used.   841196 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 252948   3440 S 100.0 10.5  11:19.01 /usr/sbin+
 82830 healtho+  20   0  457240  70024   4188 R  41.2  2.9   0:02.05 php-fpm: +
 83067 nigeria   20   0  400652  15936  10220 S  17.6  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44416   3472   1532 S   5.9  0.1   0:41.02 /usr/lib/+
   536 root      20   0   24896   1400    820 S   5.9  0.1   0:06.72 /usr/lib/+
 83063 pactpay   20   0  476724  17488  11728 S   5.9  0.7   0:00.02 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.36 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.55 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:35.90 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:04.91 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.81 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.27 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.64 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   1764   1512 S   0.0  0.1   0:16.84 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    492    364 S   0.0  0.0   0:02.84 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240   1088    696 S   0.0  0.0   0:03.88 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    376    292 S   0.0  0.0   0:00.66 /usr/sbin+
   495 root      20   0   52852    424    312 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1352    624 S   0.0  0.1   0:15.23 /usr/bin/+
   501 nscd      20   0  994492   3376    668 S   0.0  0.1   0:14.03 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6580   1548 S   0.0  0.3   0:00.39 queueproc+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.81 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3880    876 S   0.0  0.2   0:00.44 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.97 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.48 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  35740   5324 S   0.0  1.5   0:15.77 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1216    824 S   0.0  0.1   0:00.36 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.63 pure-ftpd+
  1126 systuser  20   0  114016  13012   2552 S   0.0  0.5   0:06.53 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.25 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.60 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:07.43 php-fpm: +
  1134 root      20   0  436392  19036  11532 S   0.0  0.8   0:00.95 php-fpm: +
  1135 root      20   0  314704   2712   1824 S   0.0  0.1   0:08.68 /usr/sbin+
  1138 root      20   0 1763032  76228    488 S   0.0  3.1   0:14.12 /usr/loca+
  1162 root      20   0  385496   5852    816 S   0.0  0.2   0:00.82 php-fpm: +
  1168 named     20   0  858124  44784   1668 S   0.0  1.9   0:16.45 /usr/sbin+
  1170 root      20   0  261688   7056   1824 S   0.0  0.3   0:07.55 cpsrvd (S+
  1179 root      20   0  386112   5520    896 S   0.0  0.2   0:00.81 php-fpm: +
  1191 root      20   0  392856   6332    736 S   0.0  0.3   0:00.80 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3416   2196 S   0.0  0.1   0:23.97 /usr/loca+
  1280 dovecot   20   0   10320    340    224 S   0.0  0.0   0:00.09 dovecot/a+
  1350 root      20   0  248084  46212    892 S   0.0  1.9   0:06.24 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.13 SonarPush+
  1413 wp-tool+  20   0  387556   3456   1560 S   0.0  0.1   0:00.29 /usr/bin/+
  1414 wp-tool+  20   0  410480  16652   1652 S   0.0  0.7   0:23.74 /usr/bin/+
  1430 root      20   0  262224  23168   5244 S   0.0  1.0   0:03.75 cpdavd - +
  1435 root      20   0  209992  10744   2416 S   0.0  0.4   0:02.86 tailwatchd
  1436 root      20   0  167452   4112   2744 S   0.0  0.2   0:00.53 dnsadmin +
  1844 root      20   0  299272    516    356 S   0.0  0.0   0:00.76 php-fpm: +
  1905 root      38  18  130416   1376    696 S   0.0  0.1   0:00.07 cpanellog+
  2132 root      20   0  267108  30916   5380 S   0.0  1.3   0:02.45 /usr/sbin+
  5902 root      20   0  269784  96368   2444 S   0.0  4.0   0:04.75 spamd chi+
  5903 root      20   0  261484  94404    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.53 [kworker]
 13861 root      20   0  183048   1056    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12848   1392   1180 S   0.0  0.1   0:00.60 /usr/loca+
 30838 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.51 /usr/loca+
 30839 root      20   0   12876   1400   1180 S   0.0  0.1   0:00.54 /usr/loca+
 30841 dovenull  20   0   46912   4012   3024 S   0.0  0.2   0:00.08 dovecot/p+
 30842 dovenull  20   0   47600   5160   3572 S   0.0  0.2   0:00.07 dovecot/i+
 30844 root      20   0   10452   1508   1136 S   0.0  0.1   0:00.06 dovecot/l+
 30845 dovenull  20   0   46912   4512   3444 S   0.0  0.2   0:00.09 dovecot/p+
 30846 dovenull  20   0   47376   4900   3548 S   0.0  0.2   0:00.04 dovecot/i+
 30847 root      20   0   24556  12276   1388 S   0.0  0.5   0:00.05 dovecot/c+
 30848 dovecot   20   0   13568   1500   1232 S   0.0  0.1   0:00.00 dovecot/s+
 30849 dovecot   20   0   41056   2844   2072 S   0.0  0.1   0:00.10 dovecot/a+
 30851 root      20   0   53252  11792   2432 S   0.0  0.5   0:00.05 /usr/loca+
 48985 root      20   0 1349832  10708    600 S   0.0  0.4   0:00.09 /usr/bin/+
 49024 root      20   0 1277056  11704    596 S   0.0  0.5   0:00.07 /usr/bin/+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 59882 nobody    20   0  277740  36508   4896 S   0.0  1.5   0:02.54 /usr/sbin+
 62044 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 64822 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65473 nobody    20   0  277840  36152   4500 S   0.0  1.5   0:01.68 /usr/sbin+
 69396 nobody    20   0  277784  36128   4452 S   0.0  1.5   0:01.61 /usr/sbin+
 69416 nobody    20   0  277620  35764   4344 S   0.0  1.5   0:01.46 /usr/sbin+
 70394 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72832 nobody    20   0  277952  35924   4148 S   0.0  1.5   0:01.07 /usr/sbin+
 74172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74197 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74204 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 74756 nobody    20   0  277952  35832   4188 S   0.0  1.5   0:00.70 /usr/sbin+
 75823 root      20   0  182436  29504   1368 S   0.0  1.2   0:11.18 lfd - sle+
 76158 nobody    20   0  277604  35812   4332 S   0.0  1.5   0:00.79 /usr/sbin+
 76159 nobody    20   0  277980  35908   4068 S   0.0  1.5   0:00.74 /usr/sbin+
 77792 nobody    20   0  277652  35504   4060 S   0.0  1.5   0:00.67 /usr/sbin+
 78888 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80879 nobody    20   0  277636  35500   3984 S   0.0  1.5   0:00.31 /usr/sbin+
 81384 nobody    20   0  277612  35196   3712 S   0.0  1.5   0:00.08 /usr/sbin+
 81939 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82016 nobody    20   0  277960  35452   3804 S   0.0  1.5   0:00.13 /usr/sbin+
 82524 nobody    20   0  277772  35224   3608 S   0.0  1.5   0:00.05 /usr/sbin+
 82531 nobody    20   0  277964  35392   3744 S   0.0  1.5   0:00.04 /usr/sbin+
 82532 nobody    20   0  277620  35096   3600 S   0.0  1.5   0:00.12 /usr/sbin+
 82538 nobody    20   0  277640  35048   3532 S   0.0  1.4   0:00.05 /usr/sbin+
 82540 nobody    20   0  277968  35304   3636 S   0.0  1.5   0:00.06 /usr/sbin+
 82541 nobody    20   0  277984  35296   3612 S   0.0  1.5   0:00.05 /usr/sbin+
 82674 healtho+  20   0  459424  72076   4188 S   0.0  3.0   0:04.48 php-fpm: +
 82723 healtho+  20   0  459288  72068   4184 S   0.0  3.0   0:03.65 php-fpm: +
 82736 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 82934 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
 82970 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 82971 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: unk+
 82984 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 82993 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 82994 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 82996 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 82997 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 82998 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 82999 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83001 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83003 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83004 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83005 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83006 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83007 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83008 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 83010 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83013 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 83014 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 83015 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 83031 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83032 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83033 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83034 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 83035 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 83036 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83041 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83042 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 83044 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 83045 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 83046 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 83056 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 83061 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 83064 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 83078 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 83084 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov07   0:35  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      56209  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root      62044  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/0:2]
root      64822  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/1:2]
root      70394  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/1:1]
root      74172  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      74197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/u200:2]
root      74204  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:4]
root      78888  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:3]
root      81939  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44416  3472 ?        Ss   Nov07   0:41 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  40244  1764 ?        Ss   Nov07   0:16 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   492 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240  1088 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   376 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   424 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1352 ?        Ss   Nov07   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3376 ?        Ssl  Nov07   0:14 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6580 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1400 ?        Ss   Nov07   0:06 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1056 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      82996  0.0  0.0 183080  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83013  0.0  0.0 113284  1212 ?        Ss   02:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      83014  0.0  0.0 108052   356 ?        S    02:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      83015  0.0  0.0 113288  1516 ?        S    02:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      83086  0.0  0.0 153840  2092 ?        R    02:54   0:00  |               \_ ps auxf
root      82997  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83033  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      82998  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83034  0.0  0.0  20164   984 ?        Ss   02:54   0:00  |   \_ jailshell (cloudsms) [83084] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  83084  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  83085  0.0  0.0 113284  1212 ?        S    02:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  83087  0.0  0.6 400652 15408 ?        S    02:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php
root      82999  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83032  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      83001  0.0  0.1 183080  2424 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83041  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      83003  0.0  0.0 183080  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83046  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      83004  0.0  0.0 183080  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83035  0.0  0.0  20164   812 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      83005  0.0  0.0 183080  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83036  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      83006  0.0  0.0 183080  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83045  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      83007  0.0  0.0 183080  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83031  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      83008  0.0  0.0 183080  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83044  0.0  0.0  20164   960 ?        Ss   02:54   0:00  |   \_ jailshell (pactpay) [83061] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83061  0.0  0.0  20164   256 ?        S    02:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   83063  0.0  0.7 476724 17488 ?        S    02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      83010  0.0  0.0 183080  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      83042  0.0  0.0  20164   964 ?        Ss   02:54   0:00      \_ jailshell (nigeria) [83064] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83064  0.0  0.0  20164   256 ?        S    02:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   83067  0.0  0.6 400652 15936 ?        S    02:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3880 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.4 5654048 35740 ?       SLsl Nov07   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1216 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   340 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  4012 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.2  47600  5160 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1508 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4512 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.2  47376  4900 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24556 12276 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1500 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2844 ?        S    01:28   0:00  \_ dovecot/auth
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13012 ?        Ssl  Nov07   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root      82736  0.0  0.1 111304  4264 ?        Ss   02:53   0:00  \_ sshd: [accepted]
root      82970  0.0  0.2 157100  5076 ?        Ss   02:53   0:00  \_ sshd: unknown [priv]
sshd      82971  0.0  0.1 115644  2624 ?        S    02:53   0:00  |   \_ sshd: unknown [net]
root      82993  0.0  0.1 111304  4448 ?        Ss   02:54   0:00  \_ sshd: [accepted]
sshd      82994  0.0  0.1 115644  2632 ?        S    02:54   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  82674 11.7  2.9 459424 72076 ?        S    02:53   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  82723 11.4  2.9 459288 72068 ?        S    02:53   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  82830 11.6  2.8 457240 70024 ?        R    02:53   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   82934  0.0  0.3 397064  8124 ?        S    02:53   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.7 436392 19036 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.1 314704  2712 ?        Ssl  Nov07   0:08 /usr/sbin/rsyslogd -n
root       1138  0.0  3.1 1763032 76228 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5852 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.8 858124 44784 ?        Ssl  Nov07   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  7056 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
root      82984  0.0  0.0      0     0 ?        Z    02:53   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5520 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6332 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3416 ?        Ss   Nov07   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46212 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.9 269784 96368 ?        S    Nov07   0:04  \_ spamd child
root       5903  0.0  3.9 261484 94404 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3456 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 16652 ?        Ss   Nov07   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  0.9 262224 23168 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209992 10744 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.1 167452  4112 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   516 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1376 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.4 1458856 252948 ?      Sl   Nov07  11:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 30916 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12848  1392 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12876  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11792 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    59882  0.1  1.5 277740 36508 ?        S    02:17   0:02  \_ /usr/sbin/httpd -k start
cloudw    83056  0.0  0.6 352096 15500 ?        S    02:54   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    65473  0.1  1.4 277840 36152 ?        S    02:27   0:01  \_ /usr/sbin/httpd -k start
nobody    69396  0.1  1.4 277784 36128 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    69416  0.1  1.4 277620 35764 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    72832  0.1  1.4 277952 35924 ?        S    02:39   0:01  \_ /usr/sbin/httpd -k start
nobody    74756  0.1  1.4 277952 35832 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    76158  0.1  1.4 277604 35812 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    76159  0.1  1.4 277980 35908 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    77792  0.1  1.4 277652 35504 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    80879  0.1  1.4 277636 35500 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    81384  0.0  1.4 277612 35196 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    82016  0.1  1.4 277960 35452 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    82524  0.0  1.4 277772 35224 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    82531  0.0  1.4 277964 35392 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    82532  0.2  1.4 277620 35096 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    82538  0.0  1.4 277640 35048 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    82540  0.1  1.4 277968 35304 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    82541  0.0  1.4 277984 35296 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182436 29504 ?        Ss   00:00   0:11 lfd - sleeping
root      48985  0.0  0.4 1349832 10708 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      49024  0.0  0.4 1277056 11704 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 29035  Threads: 4  Questions: 5374253  Slow queries: 0  Opens: 9083  Flush tables: 1  Open tables: 2000  Queries per second avg: 185.095
*************************** 1. row ***************************
     Id: 76506
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 76508
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 76510
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 76513
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.148 TIME_WAIT
      1 20.90.7.152 TIME_WAIT
      1 20.90.7.154 TIME_WAIT
      1 20.90.7.156 TIME_WAIT
      1 20.90.7.158 TIME_WAIT
      1 3.212.205.90 TIME_WAIT
      1 3.216.86.144 TIME_WAIT
      1 3.219.80.71 TIME_WAIT
      1 34.192.125.239 TIME_WAIT
      1 34.205.79.114 TIME_WAIT
      1 40.77.167.16 TIME_WAIT
      1 44.216.172.204 TIME_WAIT
      1 52.3.127.170 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      1 74.7.228.179 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      1 82.165.213.127 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 94.103.90.150 TIME_WAIT
      3 66.249.70.193 TIME_WAIT
     33 103.253.27.28 TIME_WAIT
     35 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 02:54:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 8 hours 3 minutes 50 seconds
   Server load: 0.71 0.96 1.23
   Total accesses: 146743 - Total Traffic: 2.4 GB - Total Duration: 76213435
   CPU Usage: u9.72 s4.88 cu1255.94 cs853.72 - 7.32% CPU load
   5.05 requests/sec - 87.8 kB/second - 17.4 kB/request - 519.367 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

.KW_K_KC.K..R__KKW_K._K.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot      Client      Protocol           VHost                                        Request
   0-3  -     0/0/7880   . 0.00 45    0   4136058 0.0  0.00  142.63 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-3  74756 2/149/8453 K 2.84 4     298 4379055 63.3 2.83  155.64 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2237431516 HTTP/1.1
   2-3  82524 0/10/8327  W 0.14 0     0   4334626 0.0  0.23  154.24 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-3  76158 0/173/7583 _ 2.97 1     175 3950970 0.0  3.12  129.67 34.192.125.239  http/1.1 team.cloudware.ng:80       GET /var/plugins/TaskManagementBundle/Resources/ HTTP/1.1
   4-3  76159 2/164/8447 K 2.64 2     387 4100839 62.4 3.32  129.21 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=666880177 HTTP/1.1
   5-3  72832 0/234/7464 _ 4.10 0     0   3938102 0.0  4.59  131.71 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-3  77792 2/143/7664 K 2.65 2     394 4129987 61.1 3.03  149.87 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3817458072 HTTP/1.1
   7-3  65473 1/417/7377 C 6.23 1     287 3741868 5.7  6.89  128.27 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   8-3  -     0/0/6790   . 0.00 35    0   3773068 0.0  0.00  124.01 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-3  80879 1/109/6990 K 0.83 4     0   3709470 0.9  1.37  116.21 104.210.140.135 http/1.1 nigeriadecide.org:80       GET /robots.txt HTTP/1.1
   10-3 -     0/0/6905   . 0.00 48    0   3480862 0.0  0.00  130.94 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-3 -     0/0/6771   . 0.00 46    0   3349243 0.0  0.00  103.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-3 81384 0/20/6007  R 0.23 2     6   3022240 0.0  0.30  90.93  18.210.58.238   http/1.1 nigeriadecide.org:443
   13-3 69396 0/432/4707 _ 6.75 1     291 2551554 0.0  7.20  76.80  103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-3 69416 0/322/4345 _ 5.68 0     397 2316286 0.0  6.24  69.02  66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1781686011 HTTP/1.1
   15-3 82016 1/31/4639  K 0.43 3     378 2401064 30.3 0.56  74.29  66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=767341759 HTTP/1.1
   16-3 82531 2/14/4830  K 0.08 0     346 2482151 62.5 0.17  74.21  66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=481854281 HTTP/1.1
   17-3 82532 0/23/4389  W 0.50 0     0   2305627 0.0  0.49  70.17  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-3 82538 0/13/2590  _ 0.13 1     292 1519563 0.0  0.15  38.98  103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   19-3 59882 2/737/2770 K 8.79 0     373 1719753 61.9 10.15 41.61  66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1464536773 HTTP/1.1
   20-3 -     0/0/2284   . 0.00 4     0   1290082 0.0  0.00  35.44  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-3 82540 0/15/2574  _ 0.21 2     1   1461852 0.0  0.42  39.76  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   22-3 82541 2/14/1779  K 0.18 4     0   1072012 6.7  0.17  28.87  104.210.140.136 http/1.1 nigeriadecide.org:443      GET /robots.txt HTTP/1.1
   23-3 -     0/0/416    . 0.00 2973  0   199668  0.0  0.00  6.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -     0/0/1641   . 0.00 2977  0   883602  0.0  0.00  32.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -     0/0/1711   . 0.00 2985  0   733768  0.0  0.00  26.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -     0/0/949    . 0.00 2997  0   513824  0.0  0.00  19.58  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -     0/0/348    . 0.00 2996  0   135791  0.0  0.00  3.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -     0/0/772    . 0.00 2998  0   288804  0.0  0.00  11.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -     0/0/736    . 0.00 1413  0   449336  0.0  0.00  10.09  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -     0/0/127    . 0.00 2984  0   44598   0.0  0.00  1.93   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -     0/0/615    . 0.00 2995  0   305307  0.0  0.00  14.56  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -     0/0/186    . 0.00 2980  0   86066   0.0  0.00  2.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -     0/0/45     . 0.00 2983  0   7032    0.0  0.00  0.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -     0/0/280    . 0.00 2813  0   117255  0.0  0.00  4.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -     0/0/34     . 0.00 3007  0   4925    0.0  0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -     0/0/271    . 0.00 2989  0   138957  0.0  0.00  4.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -     0/0/180    . 0.00 2687  0   80106   0.0  0.00  2.49   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -     0/0/70     . 0.00 3008  0   27450   0.0  0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -     0/0/55     . 0.00 2982  0   23711   0.0  0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -     0/0/120    . 0.00 2764  0   47805   0.0  0.00  1.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -     0/0/41     . 0.00 2988  0   13053   0.0  0.00  0.37   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -     0/0/343    . 0.00 2968  0   157003  0.0  0.00  4.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -     0/0/1852   . 0.00 2992  0   792927  0.0  0.00  30.21  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -     0/0/70     . 0.00 3005  0   19485   0.0  0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -     0/0/207    . 0.00 2993  0   100344  0.0  0.00  2.84   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -     0/0/17     . 0.00 2994  0   3427    0.0  0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -     0/0/61     . 0.00 3006  0   23416   0.0  0.00  0.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -     0/0/373    . 0.00 2846  0   143685  0.0  0.00  4.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16     . 0.00 5281  0   5601    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69     . 0.00 5255  0   32068   0.0  0.00  1.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94     . 0.00 5267  0   46144   0.0  0.00  1.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24     . 0.00 5265  0   7231    0.0  0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902    . 0.00 5146  356 427396  0.0  0.00  16.37  66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220    . 0.00 5277  0   104301  0.0  0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20     . 0.00 5250  0   5450    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53     . 0.00 5144  352 26129   0.0  0.00  0.72   66.249.70.32    http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18     . 0.00 6126  0   7494    0.0  0.00  0.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00 5962  0   26486   0.0  0.00  0.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00 6185  0   37042   0.0  0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00 6143  0   4755    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00 6189  0   8011    0.0  0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00 6165  0   3968    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00 6150  0   126089  0.0  0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00 6144  0   196325  0.0  0.00  9.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249    . 0.00 5273  282 111456  0.0  0.00  3.97   102.90.98.148   http/1.1
   66-1 -     0/0/234    . 0.00 6152  0   130247  0.0  0.00  4.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00 6184  0   4952    0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00 6138  0   5501    0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00 6155  0   4783    0.0  0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00 6170  0   9834    0.0  0.00  0.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00 6164  0   3804    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00 6172  0   1625    0.0  0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00 6128  0   3678    0.0  0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00 6146  0   5547    0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00 6147  0   2381    0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00 6173  0   3573    0.0  0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00 6142  0   351530  0.0  0.00  15.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 13757 0   641     0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00 13745 0   1675    0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 453
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...49)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 9707
   total entries replaced since starting: 0
   total entries expired since starting: 9253
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 32 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit