403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.12.15.txt
 ## swap threshold exceeded
## server overview
2025-11-08.12.15 load[0] mem[64/65] mysql[4/11] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1460          92          51         810         682
Swap:          1999        1383         616
 12:15:02 up  2:28,  0 users,  load average: 0.55, 0.85, 0.87
## system overview
top - 12:15:02 up  2:28,  0 users,  load average: 0.55, 0.85, 0.87
Tasks: 204 total,  12 running, 191 sleeping,   0 stopped,   1 zombie
%Cpu(s): 83.3 us, 16.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   107380 free,  1481936 used,   830984 buff/cache
KiB Swap:  2047996 total,   631804 free,  1416192 used.   712996 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 238828   3604 S  76.5  9.9   3:39.58 /usr/sbin+
 92299 healtho+  20   0  453792  62944   4208 R  41.2  2.6   0:01.18 php-fpm: +
 92322 healtho+  20   0  443040  53136   4208 S  17.6  2.2   0:00.71 php-fpm: +
 92499 root      20   0  158568  12928   2832 S  11.8  0.5   0:00.05 /usr/loca+
 92421 nigeria   20   0  400652  15932  10216 S   5.9  0.7   0:00.06 /opt/cpan+
 92507 root      20   0  160220   2064   1580 R   5.9  0.1   0:00.01 top -bcn1
     1 root      20   0   44424   3492   1536 R   0.0  0.1   0:14.36 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.02 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:11.38 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.57 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.52 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.47 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.16 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.64 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   2436   2120 S   0.0  0.1   0:05.72 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    516    388 S   0.0  0.0   0:00.97 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7580   1348 S   0.0  0.3   0:00.27 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:04.85 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.20 /usr/sbin+
   539 root      20   0   52852    396    300 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.17 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    968    512 S   0.0  0.0   0:01.28 /usr/lib/+
   547 nscd      20   0  928956   1504    808 S   0.0  0.1   0:04.74 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.26 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   4028   1008 S   0.0  0.2   0:00.18 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.46 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 193160   1164 S   0.0  8.0   0:13.61 /usr/loca+
   975 root      20   0  249168   5348   1908 S   0.0  0.2   0:02.79 /usr/sbin+
   976 named     20   0 1186804  34056   1816 S   0.0  1.4   0:05.13 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:02.74 php-fpm: +
   982 systuser  20   0  114016  13092   2740 S   0.0  0.5   0:02.17 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.84 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.19 /usr/bin/+
   986 cpanelc+  20   0   10340   3504   2436 R   0.0  0.1   0:07.31 /usr/loca+
   987 root      20   0  386112    820    608 S   0.0  0.0   0:00.27 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    744    536 S   0.0  0.0   0:00.28 php-fpm: +
   990 root      20   0  153404    380    296 S   0.0  0.0   0:00.19 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.35 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.26 php-fpm: +
  1006 telegraf  20   0 5654048  35992   5688 S   0.0  1.5   0:05.21 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.13 /usr/sbin+
  1012 root      20   0  261032  27884   5516 S   0.0  1.2   0:01.48 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.36 /usr/sbin+
  1129 dovenull  20   0   46984   2712   1932 S   0.0  0.1   0:00.14 dovecot/p+
  1130 dovenull  20   0   47744   3520   2232 S   0.0  0.1   0:00.11 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.11 dovecot/l+
  1133 dovenull  20   0   47188   2644   1708 S   0.0  0.1   0:00.20 dovecot/p+
  1134 dovenull  20   0   47500   3416   2232 S   0.0  0.1   0:00.11 dovecot/i+
  1142 root      20   0   24528   2604    552 S   0.0  0.1   0:00.07 dovecot/c+
  1144 dovecot   20   0   13568    664    436 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2896    864 S   0.0  0.1   0:00.06 SonarPush+
  1217 wp-tool+  20   0  410452  35988   1968 S   0.0  1.5   0:07.52 /usr/bin/+
  1218 wp-tool+  20   0  387528  13384   1760 S   0.0  0.6   0:00.16 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.21 dovecot/a+
  1264 root      20   0  209324  20384   2916 S   0.0  0.8   0:01.12 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.17 dnsadmin +
  1268 root      20   0  183900   6448   3216 S   0.0  0.3   0:00.53 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.23 php-fpm: +
  1717 root      38  18  130416   1444    720 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.66 /usr/sbin+
  1952 root      20   0   12836    436    324 S   0.0  0.0   0:01.04 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.86 /usr/loca+
  1954 root      20   0   12880    404    280 S   0.0  0.0   0:00.94 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  182088  11116   1212 S   0.0  0.5   0:08.96 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.15 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.31 /usr/loca+
 47195 root      20   0  259304 125916   2948 S   0.0  5.2   0:01.09 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 71252 root      20   0       0      0      0 R   0.0  0.0   0:00.05 [kworker/+
 71949 cloudw    20   0  471856   9448   5048 S   0.0  0.4   0:01.49 php-fpm: +
 73427 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 76930 worencom  20   0   38484   3584   2568 S   0.0  0.1   0:00.00 dovecot/i+
 79320 nobody    20   0  277896  19292   3996 S   0.0  0.8   0:00.69 /usr/sbin+
 80859 nobody    20   0  277528  19352   4168 S   0.0  0.8   0:00.93 /usr/sbin+
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.06 /usr/bin/+
 84123 root      20   0 1277056  11852    596 S   0.0  0.5   0:00.06 /usr/bin/+
 84976 nobody    20   0  277840  20120   4408 S   0.0  0.8   0:00.83 /usr/sbin+
 85108 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 86312 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 86570 nobody    20   0  277564  19000   3904 S   0.0  0.8   0:00.40 /usr/sbin+
 86591 nobody    20   0  277884  19652   4052 S   0.0  0.8   0:00.40 /usr/sbin+
 86598 nobody    20   0  277880  19376   3816 S   0.0  0.8   0:00.43 /usr/sbin+
 86844 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 87815 nobody    20   0  277532  18744   3708 S   0.0  0.8   0:00.26 /usr/sbin+
 88645 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89053 cloudw    20   0  471840   9428   5040 S   0.0  0.4   0:00.36 php-fpm: +
 89085 nobody    20   0  277564  19204   3956 S   0.0  0.8   0:00.50 /usr/sbin+
 89432 nobody    20   0  277532  18996   3988 S   0.0  0.8   0:00.22 /usr/sbin+
 89689 nobody    20   0  277540  18844   3844 S   0.0  0.8   0:00.35 /usr/sbin+
 89839 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90201 nobody    20   0  277868  19028   3776 S   0.0  0.8   0:00.41 /usr/sbin+
 90208 nobody    20   0  277536  18696   3708 S   0.0  0.8   0:00.36 /usr/sbin+
 90209 nobody    20   0  277880  19196   4056 S   0.0  0.8   0:00.35 /usr/sbin+
 90210 nobody    20   0  277556  19080   4048 S   0.0  0.8   0:00.29 /usr/sbin+
 90778 nobody    20   0  277556  18652   3656 S   0.0  0.8   0:00.25 /usr/sbin+
 90900 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91277 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.18 php-fpm: +
 91323 nobody    20   0  277884  18884   3756 S   0.0  0.8   0:00.17 /usr/sbin+
 91329 nobody    20   0  277528  18988   4012 S   0.0  0.8   0:00.11 /usr/sbin+
 91330 nobody    20   0  277592  18704   3660 S   0.0  0.8   0:00.14 /usr/sbin+
 91398 cloudw    20   0  471784   9148   4744 S   0.0  0.4   0:00.18 php-fpm: +
 91424 nobody    20   0  277880  18856   3732 S   0.0  0.8   0:00.13 /usr/sbin+
 91593 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.18 php-fpm: +
 91938 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92240 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 92300 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 92303 healtho+  20   0  451100  61352   4208 S   0.0  2.5   0:01.04 php-fpm: +
 92304 healtho+  20   0  451100  61344   4212 S   0.0  2.5   0:01.03 php-fpm: +
 92318 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 92319 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
 92354 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 92356 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92357 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92358 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92360 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92361 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92362 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92363 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92366 root      20   0  183040   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 92367 root      20   0  183040   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 92368 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92370 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92376 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92378 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 92379 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 92380 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 92382 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 /usr/loca+
 92386 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 92388 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 92389 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 92390 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 92392 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 92393 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 92395 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 92396 root      20   0  161716  14220   2980 S   0.0  0.6   0:00.06 /usr/loca+
 92397 root      20   0  188228  11108   5148 S   0.0  0.5   0:00.01 /usr/loca+
 92399 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 92407 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 92408 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92410 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 92416 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 92437 root      20   0  160224   2364   1632 S   0.0  0.1   0:00.01 top -n 2 +
 92518 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      71252  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:1]
root      73427  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      85108  0.0  0.0      0     0 ?        S    12:02   0:00  \_ [kworker/1:3]
root      86312  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/1:4]
root      86844  0.0  0.0      0     0 ?        S    12:05   0:00  \_ [kworker/0:3]
root      88645  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/0:4]
root      89839  0.0  0.0      0     0 ?        S    12:10   0:00  \_ [kworker/1:2]
root      90900  0.0  0.0      0     0 ?        S    12:12   0:00  \_ [kworker/u200:1]
root      91938  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44424  3492 ?        Ss   09:46   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39496  2436 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   516 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.3 224280  7580 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   396 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   968 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1504 ?        Ssl  09:46   0:04 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      92354  0.0  0.0 183040  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92390  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      92399  0.0  0.0 108052   360 ?        S    12:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      92407  0.0  0.0 113288  1520 ?        S    12:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      92519  0.0  0.0 153840  2088 ?        R    12:15   0:00  |               \_ ps auxf
root      92356  0.0  0.0 183040  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92388  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      92357  0.0  0.0 183040  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92393  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      92358  0.0  0.0 183040  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92382  0.0  0.0  20164   980 ?        Ss   12:15   0:00  |   \_ jailshell (cloudsms) [92520] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  92520  0.0  0.0  20164   256 ?        S    12:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      92360  0.0  0.0 183040  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92378  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      92361  0.0  0.0 183040  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92376  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      92362  0.0  0.0 183040  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92389  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      92363  0.0  0.0 183040  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92392  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      92366  0.0  0.0 183040  2132 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92379  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      92397  1.0  0.4 188228 11108 ?        S    12:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      92437  0.0  0.0 160224  2364 ?        S    12:15   0:00  |           \_ top -n 2 -b -c
root      92367  0.0  0.0 183040  2132 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92380  0.0  0.0 113284  1208 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
root      92396  6.0  0.5 161716 14220 ?        S    12:15   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/autorepair recoverymgmt
root      92499  0.0  0.5 158568 12928 ?        S    12:15   0:00  |           \_ /usr/local/cpanel/3rdparty/perl/536/bin/perl
root      92368  0.0  0.0 183040  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92395  0.0  0.0  20164   968 ?        Ss   12:15   0:00  |   \_ jailshell (pactpay) [92408] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92408  0.0  0.0  20164   260 ?        S    12:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92416  0.0  0.7 476724 17484 ?        S    12:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      92370  0.0  0.0 183040  2136 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      92386  0.0  0.0  20164   968 ?        Ss   12:15   0:00      \_ jailshell (nigeria) [92410] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92410  0.0  0.0  20164   264 ?        S    12:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92421  0.0  0.6 400652 15932 ?        S    12:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  4028 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  7.9 1763032 193160 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.2 249168  5348 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.4 1186804 34056 ?       Ssl  09:46   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9448 ?        S    11:41   0:01  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    89053  0.0  0.3 471840  9428 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    91277  0.1  0.3 471784  9144 ?        S    12:12   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    91398  0.1  0.3 471784  9148 ?        S    12:12   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    91593  0.1  0.3 471784  9144 ?        S    12:13   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  92299 17.4  2.6 453792 63472 ?        R    12:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  92303 15.0  2.5 451100 61352 ?        R    12:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  92304 14.7  2.5 451100 61344 ?        S    12:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   92319  0.0  0.2 397064  5612 ?        S    12:14   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  92322 17.7  2.1 443040 53136 ?        S    12:14   0:00  \_ php-fpm: pool health_oyostate_gov_ng
systuser    982  0.0  0.5 114016 13092 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3504 ?        Ss   09:46   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   820 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   744 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   380 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.4 5654048 35992 ?       SLsl 09:46   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2712 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47744  3520 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2644 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3416 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2604 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   664 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  76930  0.0  0.1  38484  3584 ?        S    11:49   0:00  \_ dovecot/imap
root      92240  0.0  0.1  41052  2728 ?        S    12:14   0:00  \_ dovecot/auth -w
root       1012  0.0  1.1 261032 27884 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      92300  0.0  0.0      0     0 ?        Z    12:14   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      92318  0.0  0.1 111304  4268 ?        Ss   12:14   0:00  \_ sshd: [accepted]
systuser   1204  0.0  0.1 157704  2896 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35988 ?        Ss   09:46   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13384 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209324 20384 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6448 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1444 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4  9.8 1458588 238828 ?      Sl   09:46   3:39 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12836   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12880   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    79320  0.0  0.7 277896 19292 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody    80859  0.0  0.7 277528 19352 ?        S    11:56   0:00  \_ /usr/sbin/httpd -k start
nobody    84976  0.1  0.8 277840 20120 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86570  0.0  0.7 277564 19000 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86591  0.0  0.8 277884 19652 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86598  0.0  0.8 277880 19376 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    87815  0.0  0.7 277532 18744 ?        S    12:06   0:00  \_ /usr/sbin/httpd -k start
nobody    89085  0.1  0.7 277564 19204 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89432  0.0  0.7 277532 18996 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89689  0.1  0.7 277540 18844 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90201  0.1  0.7 277868 19028 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90208  0.1  0.7 277536 18696 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90209  0.1  0.7 277880 19196 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90210  0.1  0.7 277556 19080 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90778  0.1  0.7 277556 18652 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    91323  0.1  0.7 277884 18884 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    91329  0.0  0.7 277528 18988 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    91330  0.1  0.7 277592 18704 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    91424  0.1  0.7 277880 18856 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 182088 11116 ?        Ss   09:46   0:08 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.2 259304 125916 ?       S    11:00   0:01  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11852 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 30608  Threads: 5  Questions: 1618364  Slow queries: 0  Opens: 3609  Flush tables: 1  Open tables: 1986  Queries per second avg: 52.873
*************************** 1. row ***************************
     Id: 23503
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 23504
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 23512
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 23514
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 23516
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 6. row ***************************
     Id: 23517
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.128 TIME_WAIT
      1 104.210.140.135 TIME_WAIT
      1 14.145.25.103 TIME_WAIT
      1 15.235.96.176 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 188.166.214.198 TIME_WAIT
      1 ::1 TIME_WAIT
      1 52.167.144.160 TIME_WAIT
      1 52.167.144.191 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     34 124.248.184.195 TIME_WAIT
     38 103.253.27.139 TIME_WAIT
     39 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 12:15:03 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 30 minutes 2 seconds
   Server load: 0.55 0.85 0.87
   Total accesses: 45802 - Total Traffic: 688.0 MB - Total Duration: 40541498
   CPU Usage: u5.42 s2.45 cu414.81 cs276.01 - 2.28% CPU load
   1.5 requests/sec - 23.0 kB/second - 15.4 kB/request - 885.147 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

W__K_KWWWW._..K...W_.W._WW_.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  86570 0/96/2499  W 1.44 145  0   2285981 0.0   1.83  41.37 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333935382p2231223
   1-0  90778 0/57/2552  _ 0.94 1    30  1829307 0.0   1.02  45.16 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   2-0  91323 0/43/2259  _ 0.50 1    5   2318811 0.0   0.58  40.05 3.213.213.161   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/assets/css/blog/blog
   3-0  79320 8/175/2270 K 3.10 2    261 3499207 245.8 9.59  39.15 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3310246562 HTTP/1.1
   4-0  91329 0/38/2350  _ 0.24 0    0   2232277 0.0   0.40  40.38 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   5-0  80859 1/317/2368 K 3.08 1    281 2127164 30.3  3.23  31.72 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4165021867 HTTP/1.1
   6-0  91330 0/40/2429  W 0.65 0    0   1381767 0.0   0.46  35.85 124.248.184.195 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-0  87815 0/59/2103  W 0.95 85   0   1503323 0.0   1.03  28.86 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630343031382p2231223
   8-0  86591 0/99/2283  W 1.42 105  0   1859269 0.0   1.63  30.05 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333939382p2231223
   9-0  91424 0/34/2430  W 0.33 0    0   2004245 0.0   0.47  35.05 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-0 -     0/0/1666   . 0.00 176  0   2381600 0.0   0.00  27.87 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 89085 0/190/2231 _ 2.02 0    907 1141111 0.0   1.75  33.38 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   12-0 -     0/0/1973   . 0.00 128  0   1414534 0.0   0.00  27.31 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/1570   . 0.00 162  0   1425729 0.0   0.00  25.17 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 84976 3/224/1838 K 2.73 0    363 864462  91.3  3.08  23.25 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1270997287 HTTP/1.1
   15-0 -     0/0/1612   . 0.00 247  0   787803  0.0   0.00  23.86 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/1427   . 0.00 158  0   1971912 0.0   0.00  23.80 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/1247   . 0.00 244  0   1091252 0.0   0.00  15.00 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 89432 0/58/1680  W 0.70 172  0   2101643 0.0   0.85  21.76 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333933312p2231223
   19-0 89689 0/91/1389  _ 1.42 1    25  1093679 0.0   1.35  17.09 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   20-0 -     0/0/886    . 0.00 160  0   486766  0.0   0.00  15.12 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 86598 0/169/354  W 1.91 125  0   674017  0.0   1.55  4.23  173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333937382p2231223
   22-0 -     0/0/1785   . 0.00 215  0   792393  0.0   0.00  24.61 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 90201 0/90/821   _ 1.62 1    341 517479  0.0   1.95  10.19 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   24-0 90208 0/79/156   W 1.59 0    0   88577   0.0   1.47  2.72  103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   25-0 90209 1/79/98    W 1.27 0    0   60382   30.3  1.45  1.62  66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=322685979 HTTP/1.1
   26-0 90210 0/73/84    _ 1.19 0    0   51412   0.0   1.17  1.22  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   27-0 -     0/0/273    . 0.00 164  0   1500580 0.0   0.00  4.70  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/9      . 0.00 240  0   6259    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/269    . 0.00 947  0   134925  0.0   0.00  6.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/8      . 0.00 4718 0   2127    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00 4738 0   13      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00 4724 0   2739    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 4741 0   1       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00 4719 0   2035    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 4713 0   2468    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 4462 0   121446  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 4723 0   2767    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 4264 0   241489  0.0   0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 4732 0   50      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 4722 0   2478    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 4669 0   11757   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 4712 0   3645    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 4729 0   709     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 4734 0   703     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 4740 0   2       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 4700 0   2869    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 4288 0   242408  0.0   0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 4711 0   2838    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 4714 0   5104    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 4372 0   174079  0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 4715 0   2028    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 4504 0   89852   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 347
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 23 seconds, (range: 0...101)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 12117
   total entries replaced since starting: 0
   total entries expired since starting: 11762
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 45 miss
   total removes since starting: 9 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit