403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.03.39.txt
 ## swap threshold exceeded
## server overview
2025-11-08.03.39 load[0] mem[64/78] mysql[2/26] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1356          99          72         907         749
Swap:          1999        1597         402
 03:39:01 up  8:49,  0 users,  load average: 0.97, 0.97, 1.05
## system overview
top - 03:39:02 up  8:49,  0 users,  load average: 0.97, 0.97, 1.05
Tasks: 206 total,   8 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 78.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    75380 free,  1408420 used,   936500 buff/cache
KiB Swap:  2047996 total,   412668 free,  1635328 used.   748400 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1462552 312712   3168 S  80.0 12.9  12:22.79 /usr/sbin+
  6435 healtho+  20   0  458660  72364   4228 R  26.7  3.0   0:02.98 php-fpm: +
  6432 healtho+  20   0  458664  70436   4224 R  13.3  2.9   0:03.15 php-fpm: +
  6547 root      20   0  169868  16852   2884 S  13.3  0.7   0:00.09 /usr/loca+
  6564 nigeria   20   0  400652  15940  10220 S  13.3  0.7   0:00.03 /opt/cpan+
  5245 nobody    20   0  277932  35412   3764 S   6.7  1.5   0:00.26 /usr/sbin+
  6442 healtho+  20   0  456100  68844   4228 R   6.7  2.8   0:02.46 php-fpm: +
  6586 cloudsms  20   0  400652  15408  10004 S   6.7  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44416   3476   1532 S   0.0  0.1   0:44.57 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.70 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:39.37 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.44 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.30 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.68 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.93 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.85 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   1696   1448 S   0.0  0.1   0:18.20 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    424    292 S   0.0  0.0   0:03.07 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    980    576 S   0.0  0.0   0:04.25 /usr/lib/+
   486 root      20   0  152780    132     88 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    376    292 S   0.0  0.0   0:00.72 /usr/sbin+
   495 root      20   0   52852    316    224 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1408    676 S   0.0  0.1   0:16.68 /usr/bin/+
   501 nscd      20   0  994492   3404    696 S   0.0  0.1   0:15.39 /usr/sbin+
   505 rpc       20   0   69256    136     76 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6092   1072 S   0.0  0.3   0:00.41 queueproc+
   536 root      20   0   24896   1404    820 S   0.0  0.1   0:07.34 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    860    428 S   0.0  0.0   0:00.89 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3528    548 S   0.0  0.1   0:00.48 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:04.55 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    936    392 S   0.0  0.0   0:02.72 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  36040   5736 S   0.0  1.5   0:17.24 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1016    624 S   0.0  0.0   0:00.39 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.70 pure-ftpd+
  1126 systuser  20   0  114016  13216   2704 S   0.0  0.5   0:07.13 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.55 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.66 /usr/bin/+
  1130 root      20   0  397344   6904   1652 S   0.0  0.3   0:08.06 php-fpm: +
  1134 root      20   0  436392  18988  11484 S   0.0  0.8   0:01.02 php-fpm: +
  1135 root      20   0  322896   2676   1796 S   0.0  0.1   0:09.44 /usr/sbin+
  1138 root      20   0 1763032 114088   1292 S   0.0  4.7   0:27.59 /usr/loca+
  1162 root      20   0  385496   5904    868 S   0.0  0.2   0:00.89 php-fpm: +
  1168 named     20   0  858124  41796   1572 S   0.0  1.7   0:18.33 /usr/sbin+
  1170 root      20   0  261820   8168   1284 S   0.0  0.3   0:07.89 cpsrvd (S+
  1179 root      20   0  386112   5536    912 S   0.0  0.2   0:00.87 php-fpm: +
  1191 root      20   0  392856   6256    660 S   0.0  0.3   0:00.85 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   11388   4396   2324 R   0.0  0.2   0:26.48 /usr/loca+
  1280 dovecot   20   0   10320    384    268 S   0.0  0.0   0:00.10 dovecot/a+
  1350 root      20   0  248084  46164    844 S   0.0  1.9   0:06.56 /usr/loca+
  1362 systuser  20   0  157708   2888    900 S   0.0  0.1   0:00.15 SonarPush+
  1392 nobody    20   0  277648  35616   4108 S   0.0  1.5   0:00.53 /usr/sbin+
  1402 nobody    20   0  277632  35480   3968 S   0.0  1.5   0:00.62 /usr/sbin+
  1413 wp-tool+  20   0  387556   3328   1432 S   0.0  0.1   0:00.32 /usr/bin/+
  1414 wp-tool+  20   0  410480  14932   1532 S   0.0  0.6   0:25.94 /usr/bin/+
  1430 root      20   0  262228  20484   2628 S   0.0  0.8   0:03.95 cpdavd - +
  1435 root      20   0  209992  10168   1772 S   0.0  0.4   0:03.25 tailwatchd
  1436 root      20   0  167452   3116   1748 S   0.0  0.1   0:00.56 dnsadmin +
  1844 root      20   0  299272    452    292 S   0.0  0.0   0:00.84 php-fpm: +
  1905 root      38  18  130416   1380    700 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  2132 root      20   0  267108  30020   4484 S   0.0  1.2   0:02.60 /usr/sbin+
  3518 nobody    20   0  277600  35460   3992 S   0.0  1.5   0:00.35 /usr/sbin+
  4008 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5648 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5800 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  5902 root      20   0  269784  97884   1500 S   0.0  4.0   0:05.46 spamd chi+
  5903 root      20   0  261484  82052    628 S   0.0  3.4   0:00.25 spamd chi+
  6136 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6206 nobody    20   0  277608  34924   3444 S   0.0  1.4   0:00.06 /usr/sbin+
  6276 root      20   0   41052   2808   2144 S   0.0  0.1   0:00.01 dovecot/a+
  6465 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
  6468 root      20   0  111304   4452   3416 S   0.0  0.2   0:00.00 sshd: [ac+
  6469 sshd      20   0  115644   2620   1552 S   0.0  0.1   0:00.00 sshd: [ne+
  6486 cloudw    20   0  405176  18044   3412 S   0.0  0.7   0:00.04 php-fpm: +
  6489 nobody    20   0  277360  32936   1896 S   0.0  1.4   0:00.00 /usr/sbin+
  6494 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  6497 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6498 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6501 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6502 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6503 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6504 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6505 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6506 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6507 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6508 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6510 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6512 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  6513 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  6514 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  6527 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6528 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6529 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6530 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6531 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6532 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 /usr/loca+
  6534 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  6535 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
  6541 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  6543 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  6552 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  6554 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
  6559 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6573 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6576 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
  6578 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
  6582 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  6583 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6585 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
  6588 root      20   0  113496   1428   1236 S   0.0  0.1   0:00.00 bash /usr+
  6589 root      20   0  176856   6012   2756 R   0.0  0.2   0:00.00 /usr/bin/+
  6590 root      20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.58 [kworker]
 13861 root      20   0  183048   1000    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    396    216 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12828   1388   1176 S   0.0  0.1   0:00.88 /usr/loca+
 30838 root      20   0   12732   1360   1176 S   0.0  0.1   0:00.76 /usr/loca+
 30839 root      20   0   12852   1396   1176 S   0.0  0.1   0:00.81 /usr/loca+
 30841 dovenull  20   0   46912   3040   1976 S   0.0  0.1   0:00.12 dovecot/p+
 30842 dovenull  20   0   47600   4428   2840 S   0.0  0.2   0:00.10 dovecot/i+
 30844 root      20   0   10452   1164    776 S   0.0  0.0   0:00.09 dovecot/l+
 30845 dovenull  20   0   46912   3104   2032 S   0.0  0.1   0:00.15 dovecot/p+
 30846 dovenull  20   0   47472   4280   2812 S   0.0  0.2   0:00.06 dovecot/i+
 30847 root      20   0   24556  11848    936 S   0.0  0.5   0:00.06 dovecot/c+
 30848 dovecot   20   0   13568   1048    688 S   0.0  0.0   0:00.01 dovecot/s+
 30849 dovecot   20   0   41164   2216   1436 S   0.0  0.1   0:00.16 dovecot/a+
 30851 root      20   0   53252  10700   1340 S   0.0  0.4   0:00.05 /usr/loca+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.28 [kworker/+
 74197 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kworker/+
 75823 root      20   0  182636  29716   1368 S   0.0  1.2   0:14.06 lfd - sle+
 85854 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87167 root      20   0 1276100  10736    588 S   0.0  0.4   0:00.07 /usr/bin/+
 87201 root      20   0 1277312  11532    552 S   0.0  0.5   0:00.06 /usr/bin/+
 87606 root      20   0  123576    576    348 S   0.0  0.0   0:00.00 /usr/sbin+
 90443 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 90543 nobody    20   0  277944  36208   4408 S   0.0  1.5   0:02.46 /usr/sbin+
 91667 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 93851 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 95749 nobody    20   0  277652  35636   4144 S   0.0  1.5   0:01.69 /usr/sbin+
 96609 nobody    20   0  277632  35780   4260 S   0.0  1.5   0:01.48 /usr/sbin+
 97722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97898 nobody    20   0  277968  35904   4076 S   0.0  1.5   0:01.29 /usr/sbin+
 97906 nobody    20   0  277944  35920   4252 S   0.0  1.5   0:01.39 /usr/sbin+
 97907 nobody    20   0  277632  35668   4152 S   0.0  1.5   0:01.53 /usr/sbin+
 99439 root      30  10  132964   3932    396 S   0.0  0.2   0:00.00 ConfigSer+
 99450 root      30  10  108056    304    228 S   0.0  0.0   0:00.00 sleep 8223
100597 nobody    20   0  277616  35488   4060 S   0.0  1.5   0:00.88 /usr/sbin+
101980 nobody    20   0  277632  35484   4044 S   0.0  1.5   0:00.77 /usr/sbin+
101983 nobody    20   0  277612  35512   4024 S   0.0  1.5   0:00.87 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov07   0:39  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:04  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      56209  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root      74197  0.0  0.0      0     0 ?        D    02:42   0:00  \_ [kworker/u200:2]
root      85854  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/1:1]
root      90443  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:3]
root      91667  0.0  0.0      0     0 ?        D    03:08   0:00  \_ [kworker/1:0]
root      93851  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:0]
root      97722  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:3]
root       1937  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/0:4]
root       4008  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/u200:0]
root       5648  0.0  0.0      0     0 ?        S    03:37   0:00  \_ [kworker/1:2]
root       6136  0.0  0.0      0     0 ?        S    03:38   0:00  \_ [kworker/0:2]
root       6573  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44416  3476 ?        Ss   Nov07   0:44 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  1696 ?        Ss   Nov07   0:18 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   424 ?        S<sl Nov07   0:03 /sbin/auditd
polkitd     484  0.0  0.0 612240   980 ?        Ssl  Nov07   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   132 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   376 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   316 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1408 ?        Rs   Nov07   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3412 ?        Ssl  Nov07   0:15 /usr/sbin/nscd
rpc         505  0.0  0.0  69256   136 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6092 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1404 ?        Ss   Nov07   0:07 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   860 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1000 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   396 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root       6497  0.0  0.1 183080  2424 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6512  0.0  0.0 113284  1212 ?        Ss   03:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       6513  0.0  0.0 108052   356 ?        S    03:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       6514  0.0  0.0 113288  1516 ?        S    03:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       6591  0.0  0.0 153672  1780 ?        R    03:39   0:00  |               \_ ps auxf
root       6498  0.0  0.1 183080  2428 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6531  0.0  0.0  20164   808 ?        Ss   03:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       6501  0.0  0.1 183080  2428 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6543  0.0  0.0  20164   988 ?        Ss   03:39   0:00  |   \_ jailshell (cloudsms) [6583] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   6583  0.0  0.0  20164   260 ?        S    03:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   6585  0.0  0.0 113284  1208 ?        S    03:39   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   6586  1.0  0.6 400652 15408 ?        S    03:39   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       6502  0.0  0.1 183080  2428 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6529  0.0  0.0  20164   804 ?        Ss   03:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       6504  0.0  0.0 183080  2420 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6528  0.0  0.0  20164   804 ?        Ss   03:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       6505  0.0  0.0 183080  2416 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6532  0.0  0.0  20164   992 ?        Ss   03:39   0:00  |   \_ jailshell (cloudsms) [6592] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       6592  0.0  0.0  20164   264 ?        R    03:39   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       6506  0.0  0.0 183080  2420 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6527  0.0  0.0  20164   804 ?        Ss   03:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       6507  0.0  0.0 183080  2416 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6541  0.0  0.0 113284  1212 ?        Ss   03:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root       6547  9.0  0.6 169868 16852 ?        S    03:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root       6588  0.0  0.0 113496  1428 ?        S    03:39   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root       6589  0.0  0.2 185196  7132 ?        R    03:39   0:00  |               \_ /usr/bin/python2.7 -c import yum
root       6508  0.0  0.0 183080  2420 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6530  0.0  0.0  20164   968 ?        Ss   03:39   0:00  |   \_ jailshell (pactpay) [6552] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6552  0.0  0.0  20164   264 ?        S    03:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6554  2.0  0.7 476724 17484 ?        S    03:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       6510  0.0  0.0 183080  2420 ?        S    03:39   0:00  \_ /usr/sbin/CROND -n
root       6534  0.0  0.0  20164   964 ?        Ss   03:39   0:00      \_ jailshell (nigeria) [6559] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6559  0.0  0.0  20164   260 ?        S    03:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6564  3.0  0.6 400652 15940 ?        S    03:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3528 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   936 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.4 5654048 36040 ?       SLsl Nov07   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1016 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   384 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  3040 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.1  47600  4428 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1164 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  3104 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.1  47472  4280 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.4  24556 11848 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1048 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.0  41164  2216 ?        S    01:28   0:00  \_ dovecot/auth
root       5800  0.0  0.1  60820  4512 ?        S    03:37   0:00  \_ dovecot/lmtp
root       6276  0.0  0.1  41052  2808 ?        S    03:38   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13216 ?        Ssl  Nov07   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root       6468  0.0  0.1 111304  4452 ?        Ss   03:38   0:00  \_ sshd: [accepted]
sshd       6469  0.0  0.1 115644  2620 ?        S    03:38   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6904 ?        Ss   Nov07   0:08 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   6432 24.3  2.9 458664 70436 ?        R    03:38   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   6435 25.0  3.0 458660 72628 ?        R    03:38   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   6442 24.8  2.8 456100 68844 ?        R    03:38   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    6465  0.0  0.3 397064  8124 ?        S    03:38   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw     6486  1.3  0.7 405176 18044 ?        S    03:38   0:00  \_ php-fpm: pool cloudware_ng
root       1134  0.0  0.7 436392 18988 ?        Ss   Nov07   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.1 322896  2676 ?        Ssl  Nov07   0:09 /usr/sbin/rsyslogd -n
root       1138  0.0  4.7 1763032 114088 ?      Ssl  Nov07   0:27 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5904 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.7 858124 41796 ?        Ssl  Nov07   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.3 261820  8168 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
root       6494  0.0  0.0      0     0 ?        Z    03:38   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5536 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6256 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  11388  4396 ?        Ss   Nov07   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46164 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  4.0 269784 97884 ?        S    Nov07   0:05  \_ spamd child
root       5903  0.0  3.3 261484 82052 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2888 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3328 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 14932 ?        Ss   Nov07   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  0.8 262228 20484 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209992 10168 ?        Ss   Nov07   0:03 tailwatchd
root       1436  0.0  0.1 167452  3116 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   452 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1380 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 12.9 1462552 312712 ?      Sl   Nov07  12:22 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 30020 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12828  1388 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1360 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12852  1396 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 10700 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    90543  0.1  1.4 277944 36208 ?        S    03:06   0:02  \_ /usr/sbin/httpd -k start
nobody    95749  0.1  1.4 277652 35636 ?        S    03:15   0:01  \_ /usr/sbin/httpd -k start
nobody    96609  0.1  1.4 277632 35780 ?        S    03:17   0:01  \_ /usr/sbin/httpd -k start
nobody    97898  0.1  1.4 277968 35904 ?        R    03:19   0:01  \_ /usr/sbin/httpd -k start
nobody    97906  0.1  1.4 277944 35920 ?        S    03:19   0:01  \_ /usr/sbin/httpd -k start
nobody    97907  0.1  1.4 277632 35668 ?        S    03:19   0:01  \_ /usr/sbin/httpd -k start
nobody   100597  0.0  1.4 277616 35488 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody   101980  0.1  1.4 277632 35484 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody   101983  0.1  1.4 277612 35512 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     1392  0.0  1.4 277648 35616 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody     1402  0.1  1.4 277632 35480 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody     3518  0.1  1.4 277600 35460 ?        S    03:33   0:00  \_ /usr/sbin/httpd -k start
nobody     5245  0.1  1.4 277932 35412 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody     6206  0.1  1.4 277608 34924 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
cloudw     6576  1.0  0.6 352096 15232 ?        S    03:39   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     6489  0.0  1.3 277360 32936 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182636 29716 ?        Ss   00:00   0:14 lfd - sleeping
root      87167  0.0  0.4 1276100 10736 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      87201  0.0  0.4 1277312 11532 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      87606  0.0  0.0 123576   576 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      99439  0.0  0.1 132964  3932 ?        SN   03:22   0:00 ConfigServer Version Check
root      99450  0.0  0.0 108056   304 ?        SN   03:22   0:00  \_ sleep 8223
## mysql stats
Uptime: 31735  Threads: 7  Questions: 5844820  Slow queries: 0  Opens: 11015  Flush tables: 1  Open tables: 2000  Queries per second avg: 184.175
*************************** 1. row ***************************
     Id: 83409
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 83414
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 83416
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 83417
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 83422
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 83424
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 124.248.184.195 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.217.108.70 TIME_WAIT
      1 68.221.67.166 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 196.250.200.163 TIME_WAIT
     35 103.253.27.139 TIME_WAIT
     36 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 03:39:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 8 hours 48 minutes 50 seconds
   Server load: 1.53 1.09 1.08
   Total accesses: 158798 - Total Traffic: 2.6 GB - Total Duration: 82186172
   CPU Usage: u11.23 s5.54 cu1383.46 cs932.56 - 7.35% CPU load
   5 requests/sec - 87.2 kB/second - 17.4 kB/request - 517.552 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

CKWWKK_W.K.K._.W..._K_..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-3  95749  1/470/8661  C 6.13  0     737 4488271 5.7   8.88  157.10 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-3  3518   3/83/9006   K 1.19  4     355 4646176 90.5  1.41  164.21 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3467692266 HTTP/1.1
   2-3  5245   0/132/9197  W 0.49  0     0   4744373 0.0   1.05  166.72 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-3  1392   16/146/8159 W 1.96  0     0   4258284 73.6  2.19  138.82 124.248.184.195 http/1.1 health.oyostate.gov.ng:443 GET /wp-login.php HTTP/1.1
   4-3  6206   2/18/9198   K 0.14  0     464 4471696 60.6  0.23  141.66 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1499528010 HTTP/1.1
   5-3  100597 4/231/8077  K 3.72  2     397 4242192 123.8 3.39  142.51 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3449106821 HTTP/1.1
   6-3  6489   0/2/8350    _ 0.00  0     7   4439557 0.0   0.01  159.11 54.167.32.123   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/blog/blog/blo
   7-3  90543  1/661/8231  W 10.00 0     0   4116207 30.0  12.63 144.41 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=223061580 HTTP/1.1
   8-3  -      0/0/7306    . 0.00  331   0   4035448 0.0   0.00  133.88 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-3  101980 3/179/7556  K 2.86  1     389 4010554 95.0  3.22  126.93 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=459825942 HTTP/1.1
   10-3 -      0/0/7463    . 0.00  430   0   3702680 0.0   0.00  138.46 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-3 101983 1/210/7180  K 3.46  3     393 3570111 30.5  3.54  110.29 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2674021468 HTTP/1.1
   12-3 -      0/0/6403    . 0.00  404   0   3243478 0.0   0.00  96.81  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-3 96609  0/367/5412  _ 5.12  0     0   2922607 0.0   5.60  93.52  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-3 -      0/0/4690    . 0.00  220   0   2496149 0.0   0.00  74.94  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-3 1402   0/150/5205  W 3.37  0     0   2693771 0.0   2.33  83.42  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-3 -      0/0/5138    . 0.00  772   0   2633501 0.0   0.00  83.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-3 -      0/0/4493    . 0.00  884   0   2360137 0.0   0.00  71.70  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-3 -      0/0/3151    . 0.00  812   0   1820234 0.0   0.00  47.47  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-3 97898  0/298/3170  _ 4.84  0     284 1924129 0.0   5.16  48.66  87.106.120.188  http/1.1
   20-3 97906  1/326/2610  K 5.18  4     342 1455091 29.5  5.49  40.92  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3094716855 HTTP/1.1
   21-3 97907  0/346/2921  _ 6.45  0     339 1644425 0.0   6.94  46.70  66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2100682726 HTTP/1.1
   22-3 -      0/0/2037    . 0.00  1175  0   1214155 0.0   0.00  38.74  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -      0/0/422     . 0.00  1163  0   205510  0.0   0.00  7.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -      0/0/1641    . 0.00  5677  0   883602  0.0   0.00  32.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -      0/0/1711    . 0.00  5685  0   733768  0.0   0.00  26.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -      0/0/949     . 0.00  5697  0   513824  0.0   0.00  19.58  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -      0/0/348     . 0.00  5696  0   135791  0.0   0.00  3.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -      0/0/772     . 0.00  5698  0   288804  0.0   0.00  11.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -      0/0/736     . 0.00  4113  0   449336  0.0   0.00  10.09  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -      0/0/127     . 0.00  5684  0   44598   0.0   0.00  1.93   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -      0/0/615     . 0.00  5695  0   305307  0.0   0.00  14.56  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -      0/0/186     . 0.00  5680  0   86066   0.0   0.00  2.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -      0/0/45      . 0.00  5683  0   7032    0.0   0.00  0.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -      0/0/280     . 0.00  5513  0   117255  0.0   0.00  4.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -      0/0/34      . 0.00  5707  0   4925    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -      0/0/271     . 0.00  5689  0   138957  0.0   0.00  4.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -      0/0/180     . 0.00  5387  0   80106   0.0   0.00  2.49   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -      0/0/70      . 0.00  5708  0   27450   0.0   0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -      0/0/55      . 0.00  5682  0   23711   0.0   0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -      0/0/120     . 0.00  5464  0   47805   0.0   0.00  1.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -      0/0/41      . 0.00  5688  0   13053   0.0   0.00  0.37   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -      0/0/343     . 0.00  5668  0   157003  0.0   0.00  4.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -      0/0/1852    . 0.00  5692  0   792927  0.0   0.00  30.21  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -      0/0/70      . 0.00  5705  0   19485   0.0   0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -      0/0/207     . 0.00  5693  0   100344  0.0   0.00  2.84   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -      0/0/17      . 0.00  5694  0   3427    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -      0/0/61      . 0.00  5706  0   23416   0.0   0.00  0.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -      0/0/373     . 0.00  5546  0   143685  0.0   0.00  4.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -      0/0/16      . 0.00  7981  0   5601    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -      0/0/69      . 0.00  7955  0   32068   0.0   0.00  1.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -      0/0/94      . 0.00  7967  0   46144   0.0   0.00  1.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -      0/0/24      . 0.00  7965  0   7231    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -      0/0/902     . 0.00  7846  356 427396  0.0   0.00  16.37  66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -      0/0/220     . 0.00  7977  0   104301  0.0   0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -      0/0/20      . 0.00  7950  0   5450    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -      0/0/53      . 0.00  7844  352 26129   0.0   0.00  0.72   66.249.70.32    http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -      0/0/18      . 0.00  8826  0   7494    0.0   0.00  0.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -      0/0/61      . 0.00  8662  0   26486   0.0   0.00  0.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -      0/0/67      . 0.00  8885  0   37042   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -      0/0/14      . 0.00  8843  0   4755    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -      0/0/18      . 0.00  8889  0   8011    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -      0/0/13      . 0.00  8865  0   3968    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -      0/0/234     . 0.00  8850  0   126089  0.0   0.00  4.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -      0/0/570     . 0.00  8844  0   196325  0.0   0.00  9.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -      0/0/249     . 0.00  7973  282 111456  0.0   0.00  3.97   102.90.98.148   http/1.1
   66-1 -      0/0/234     . 0.00  8852  0   130247  0.0   0.00  4.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -      0/0/13      . 0.00  8884  0   4952    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -      0/0/13      . 0.00  8838  0   5501    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -      0/0/9       . 0.00  8855  0   4783    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -      0/0/16      . 0.00  8870  0   9834    0.0   0.00  0.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -      0/0/10      . 0.00  8864  0   3804    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -      0/0/6       . 0.00  8872  0   1625    0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -      0/0/11      . 0.00  8828  0   3678    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -      0/0/10      . 0.00  8846  0   5547    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -      0/0/7       . 0.00  8847  0   2381    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -      0/0/7       . 0.00  8873  0   3573    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -      0/0/675     . 0.00  8842  0   351530  0.0   0.00  15.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/2       . 0.00  16457 0   641     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/3       . 0.00  16445 0   1675    0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 302
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 23 seconds, (range: 0...91)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 12685
   total entries replaced since starting: 0
   total entries expired since starting: 12380
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 48 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit