403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-10.02.48 load[0] mem[65/59] mysql[4/9] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1489          82          37         791         673
Swap:          1999        1269         730
 02:48:01 up  1:54,  0 users,  load average: 0.53, 0.84, 0.90
## system overview
top - 02:48:01 up  1:54,  0 users,  load average: 0.53, 0.84, 0.90
Tasks: 205 total,   7 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.6 us, 18.8 sy,  0.0 ni,  3.1 id, 12.5 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    66484 free,  1539004 used,   814812 buff/cache
KiB Swap:  2047996 total,   747772 free,  1300224 used.   676336 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1462012 235752   2680 S 100.0  9.7   2:03.25 /usr/sbin+
 69693 healtho+  20   0  457240  67756   4240 R  12.5  2.8   0:02.32 php-fpm: +
 69901 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.03 /opt/cpan+
   665 root       0 -20       0      0      0 S   6.2  0.0   0:01.94 [loop0]
     1 root      20   0   44420   3468   1540 S   0.0  0.1   0:10.03 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.58 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.17 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:08.20 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.02 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.14 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:01.15 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.43 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:01.05 [kworker/+
   357 root      20   0   40244   7248   6916 S   0.0  0.3   0:03.89 /usr/lib/+
   385 root      20   0   45352    236    116 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    344    216 S   0.0  0.0   0:00.62 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    996    600 S   0.0  0.0   0:01.00 /usr/lib/+
   482 dbus      20   0   58608   1356    648 S   0.0  0.1   0:03.81 /usr/bin/+
   494 rpc       20   0   69256    156      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    364    272 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    404    296 S   0.0  0.0   0:00.15 /usr/sbin+
   528 root      20   0  224276   7104   1296 S   0.0  0.3   0:00.18 queueproc+
   533 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1460    824 S   0.0  0.1   0:01.66 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     64     60 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1320    620 S   0.0  0.1   0:03.47 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    488    320 S   0.0  0.0   0:00.20 /usr/sbin+
   583 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     44     44 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3852    820 S   0.0  0.2   0:00.12 /usr/sbin+
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  33976   3160 S   0.0  1.4   0:03.93 /usr/loca+
   941 root      20   0   51656   1116    724 S   0.0  0.0   0:00.12 /usr/sbin+
   942 root      20   0  153404    320    236 S   0.0  0.0   0:00.15 pure-ftpd+
   943 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    428    324 S   0.0  0.0   0:00.87 /usr/sbin+
   945 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   946 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1763112 302196    632 S   0.0 12.5   0:13.83 /usr/loca+
   950 root      20   0  436392  11296  11092 S   0.0  0.5   0:00.33 php-fpm: +
   952 named     20   0  718804  35212   1668 S   0.0  1.5   0:05.62 /usr/sbin+
   960 root      20   0  392856    776    592 S   0.0  0.0   0:00.28 php-fpm: +
   961 root      20   0  232784   6572   5868 S   0.0  0.3   0:01.90 /usr/sbin+
   962 root      20   0  397344   3224    652 S   0.0  0.1   0:01.51 php-fpm: +
   965 root      20   0  261416   6696   1760 S   0.0  0.3   0:01.92 cpsrvd (S+
   967 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   969 memcach+  20   0  342400    120    120 S   0.0  0.0   0:00.15 /usr/bin/+
   970 cpanelc+  20   0   10484   3496   2344 S   0.0  0.1   0:05.55 /usr/loca+
   982 root      20   0  385496    516    416 S   0.0  0.0   0:00.27 php-fpm: +
   985 root      20   0  386112    688    484 S   0.0  0.0   0:00.25 php-fpm: +
   986 systuser  20   0  113272     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   992 systuser  20   0  114016  12916   2696 S   0.0  0.5   0:01.68 /usr/loca+
   993 root      20   0  572372    808    216 S   0.0  0.0   0:00.68 /usr/bin/+
  1087 dovecot   20   0   10320    484    368 S   0.0  0.0   0:00.01 dovecot/a+
  1168 root      20   0  248160 117988   1244 S   0.0  4.9   0:03.61 /usr/loca+
  1181 systuser  20   0  157704   2988    928 S   0.0  0.1   0:00.05 SonarPush+
  1219 wp-tool+  20   0  410452  36588   1492 S   0.0  1.5   0:05.82 /usr/bin/+
  1220 wp-tool+  20   0  387528  13204   1580 S   0.0  0.5   0:00.15 /usr/bin/+
  1249 root      20   0  209356  12012   2424 S   0.0  0.5   0:00.74 tailwatchd
  1252 root      20   0  262228  24616   6760 S   0.0  1.0   0:00.54 cpdavd - +
  1253 root      20   0  167452   3344   1972 S   0.0  0.1   0:00.20 dnsadmin +
  1749 root      20   0  299272    768    388 S   0.0  0.0   0:00.18 php-fpm: +
  1799 root      38  18  130416   1424    700 S   0.0  0.1   0:00.01 cpanellog+
  1947 root      20   0  267112  31024   5436 S   0.0  1.3   0:00.82 /usr/sbin+
  2095 root      20   0  181688  10552   1196 S   0.0  0.4   0:06.33 lfd - sle+
  5800 root      20   0  183048   1008    448 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284    380    200 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056     92     20 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152    488      0 S   0.0  0.0   0:00.14 [kworker]
  6471 root      20   0  265416 132000   2816 S   0.0  5.5   0:01.25 spamd chi+
  6472 root      20   0  248160 117224    516 S   0.0  4.8   0:00.00 spamd chi+
 10342 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 22574 root      20   0   12860   1388   1180 S   0.0  0.1   0:00.44 /usr/loca+
 22575 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.38 /usr/loca+
 22576 root      20   0   12904   1400   1180 S   0.0  0.1   0:00.41 /usr/loca+
 22578 dovenull  20   0   46912   3728   2700 S   0.0  0.2   0:00.07 dovecot/p+
 22579 dovenull  20   0   47428   4180   2760 S   0.0  0.2   0:00.04 dovecot/i+
 22580 root      20   0   10452   1176    804 S   0.0  0.0   0:00.05 dovecot/l+
 22581 dovenull  20   0   46912   3708   2684 S   0.0  0.2   0:00.07 dovecot/p+
 22582 dovenull  20   0   47372   4080   2700 S   0.0  0.2   0:00.08 dovecot/i+
 22583 root      20   0   24528  11840    960 S   0.0  0.5   0:00.04 dovecot/c+
 22584 dovecot   20   0   13572   1084    816 S   0.0  0.0   0:00.01 dovecot/s+
 22588 dovecot   20   0   41056   2316   1548 S   0.0  0.1   0:00.12 dovecot/a+
 22589 root      20   0   53252  10972   1588 S   0.0  0.5   0:00.04 /usr/loca+
 41160 root      20   0 1341636  11188    600 S   0.0  0.5   0:00.09 /usr/bin/+
 41194 root      20   0 1277568  12684    596 S   0.0  0.5   0:00.08 /usr/bin/+
 47828 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 49028 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 49206 nobody    20   0  277984  36588   4748 S   0.0  1.5   0:02.02 /usr/sbin+
 49218 nobody    20   0  277792  36528   4828 S   0.0  1.5   0:02.15 /usr/sbin+
 49219 nobody    20   0  277728  36424   4788 S   0.0  1.5   0:02.17 /usr/sbin+
 51787 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 55187 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 57885 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 58963 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 60040 nobody    20   0  277864  36192   4440 S   0.0  1.5   0:01.09 /usr/sbin+
 60050 nobody    20   0  277992  36128   4392 S   0.0  1.5   0:00.87 /usr/sbin+
 60064 nobody    20   0  277704  36176   4564 S   0.0  1.5   0:00.93 /usr/sbin+
 62182 nobody    20   0  277660  36068   4492 S   0.0  1.5   0:00.55 /usr/sbin+
 63144 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63786 nobody    20   0  277856  35856   4128 S   0.0  1.5   0:00.43 /usr/sbin+
 64256 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 64444 nobody    20   0  278004  35976   4264 S   0.0  1.5   0:00.32 /usr/sbin+
 65443 nobody    20   0  277660  35568   4004 S   0.0  1.5   0:00.17 /usr/sbin+
 65450 nobody    20   0  277596  35556   4064 S   0.0  1.5   0:00.30 /usr/sbin+
 65451 nobody    20   0  277984  35964   4272 S   0.0  1.5   0:00.27 /usr/sbin+
 65782 nobody    20   0  278008  35720   3996 S   0.0  1.5   0:00.07 /usr/sbin+
 65795 nobody    20   0  277660  35500   3940 S   0.0  1.5   0:00.13 /usr/sbin+
 65916 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 65962 nobody    20   0  277864  35856   4120 S   0.0  1.5   0:00.35 /usr/sbin+
 65978 nobody    20   0  277660  35600   4036 S   0.0  1.5   0:00.14 /usr/sbin+
 65979 nobody    20   0  277636  35636   4100 S   0.0  1.5   0:00.29 /usr/sbin+
 68125 nobody    20   0  277856  35736   4000 S   0.0  1.5   0:00.15 /usr/sbin+
 69237 nobody    20   0  277984  35536   3844 S   0.0  1.5   0:00.07 /usr/sbin+
 69328 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69463 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 69590 healtho+  20   0  459876  70824   4320 S   0.0  2.9   0:04.06 php-fpm: +
 69694 nigeria   20   0  397064   5768   2400 S   0.0  0.2   0:00.01 php-fpm: +
 69792 salutem   20   0  410316  23912   3904 S   0.0  1.0   0:00.46 php-fpm: +
 69827 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 69832 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69833 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69834 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69835 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69837 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69838 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69839 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69840 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69841 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69842 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69843 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69844 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69845 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69847 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 69850 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 69851 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 69852 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 69862 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69863 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 69864 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69865 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 69866 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69868 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 69869 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69870 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69871 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69872 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69873 root      20   0  113284   1200   1020 S   0.0  0.0   0:00.00 /bin/sh /+
 69874 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69876 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69880 root      20   0  129956   2320   1828 S   0.0  0.1   0:00.00 /usr/bin/+
 69893 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69894 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 69895 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 69898 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 69909 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 sh -c fin+
 69910 root      20   0  124400   5264    956 R   0.0  0.2   0:00.00 find /tmp+
 69911 root      20   0  112812   1008    860 S   0.0  0.0   0:00.00 grep -Ef +
 69923 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 69924 root      20   0   38648   6500   3040 R   0.0  0.3   0:00.00 /usr/loca+
 69925 cloudw    20   0  281044  13340   7824 R   0.0  0.6   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      10342  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:1]
root      47828  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/1:3]
root      49028  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/u200:0]
root      51787  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/0:1]
root      55187  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/0:0]
root      57885  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:4]
root      58963  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/0:2]
root      63144  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:3]
root      64256  0.0  0.0      0     0 ?        S    02:41   0:00  \_ [kworker/1:1]
root      65916  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/0:4]
root      69328  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:0]
root      69893  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44420  3468 ?        Ss   00:54   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  7248 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   236 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   344 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   996 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58608  1356 ?        Ss   00:54   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256   156 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   364 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   404 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224276  7104 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1460 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    64 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1320 ?        Ssl  00:54   0:03 /usr/sbin/nscd
root        562  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   488 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048  1008 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284   380 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056    92 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      69832  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69850  0.0  0.0 113284  1208 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      69851  0.0  0.0 108052   356 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      69852  0.0  0.0 113288  1516 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      69926  0.0  0.0 153840  2096 ?        R    02:48   0:00  |               \_ ps auxf
root      69833  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69872  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      69834  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69869  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      69835  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69874  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      69837  0.0  0.0 183044  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69876  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      69838  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69864  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      69839  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69870  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      69840  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69871  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      69841  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69868  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [69927] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  69927  0.0  0.0  20164   264 ?        S    02:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  69928  0.0  0.0 113284  1208 ?        S    02:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  69929  0.0  0.1 131852  3316 ?        R    02:48   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      69842  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69862  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      69843  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69866  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      69844  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69873  0.0  0.0 113284  1200 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      69880  0.0  0.0 129956  2320 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      69909  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      69910  0.0  0.2 124532  5264 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      69911  0.0  0.0 112812  1008 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      69845  0.0  0.0 183044  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69865  0.0  0.0  20164   968 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [69894] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69894  0.0  0.0  20164   264 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69895  0.0  0.7 476724 17484 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      69847  0.0  0.0 183044  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      69863  0.0  0.0  20164   968 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [69898] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69898  0.0  0.0  20164   256 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69901  0.0  0.6 400652 15936 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    68 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    44 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3852 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.4 5654048 33976 ?       SLsl 00:54   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656  1116 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   484 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.1  46912  3728 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  47428  4180 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452  1176 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.1  46912  3708 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47372  4080 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.4  24528 11840 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572  1084 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41056  2316 ?        S    01:28   0:00  \_ dovecot/auth
root      69463  0.0  0.1  60820  4512 ?        S    02:47   0:00  \_ dovecot/lmtp
root        942  0.0  0.0 153404   320 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   428 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
systuser    945  0.0  0.0  13012    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    72 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.2 12.4 1763112 302196 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.4 436392 11296 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.4 718804 35212 ?        Ssl  00:54   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   776 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
salutem   69792  6.5  0.9 410316 23912 ?        S    02:47   0:00  \_ php-fpm: pool salutem_com_ng
root        961  0.0  0.2 232784  6572 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  3224 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  69590 11.2  2.9 459876 70824 ?        S    02:47   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  69693 10.6  2.7 457240 67756 ?        R    02:47   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   69694  0.0  0.2 397064  5768 ?        S    02:47   0:00  \_ php-fpm: pool nigeriadecide_org
root        965  0.0  0.2 261416  6696 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root      69827  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400   120 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3496 ?        Ss   00:54   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   516 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   688 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    80 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.5 114016 12916 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   808 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  4.8 248160 117988 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  5.4 265416 132000 ?       S    01:00   0:01  \_ spamd child
root       6472  0.0  4.8 248160 117224 ?       S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2988 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  1.5 410452 36588 ?        Ss   00:54   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.5 387528 13204 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.4 209356 12012 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  1.0 262228 24616 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1253  0.0  0.1 167452  3344 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   768 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1424 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8  9.7 1462012 235752 ?      Sl   00:54   2:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  1.2 267112 31024 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12860  1388 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12904  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.4  53252 10972 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    49206  0.1  1.5 277984 36588 ?        S    02:14   0:02  \_ /usr/sbin/httpd -k start
nobody    49218  0.1  1.5 277792 36528 ?        S    02:14   0:02  \_ /usr/sbin/httpd -k start
nobody    49219  0.1  1.5 277728 36424 ?        S    02:14   0:02  \_ /usr/sbin/httpd -k start
cloudw    69925  0.0  0.6 281716 14772 ?        R    02:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    60040  0.1  1.4 277864 36192 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    60050  0.1  1.4 277992 36128 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    60064  0.1  1.4 277704 36176 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    62182  0.0  1.4 277660 36068 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    63786  0.0  1.4 277856 35856 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    64444  0.0  1.4 278004 35976 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    65443  0.0  1.4 277660 35568 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65450  0.1  1.4 277596 35556 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65451  0.0  1.4 277984 35964 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65782  0.0  1.4 278008 35720 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65795  0.0  1.4 277660 35500 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65962  0.1  1.4 277864 35856 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    65978  0.0  1.4 277660 35600 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    65979  0.1  1.4 277636 35636 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    68125  0.0  1.4 277856 35736 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    69237  0.1  1.4 277984 35536 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.4 181688 10552 ?        Ss   00:54   0:06 lfd - sleeping
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   488 ?        S    01:00   0:00  \_ [kworker]
root      41160  0.0  0.4 1341636 11188 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      41194  0.0  0.5 1277568 12684 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 6827  Threads: 4  Questions: 804413  Slow queries: 0  Opens: 3641  Flush tables: 1  Open tables: 1997  Queries per second avg: 117.828
*************************** 1. row ***************************
     Id: 12429
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 12433
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 12434
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 12436
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 12437
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.200.66.122 TIME_WAIT
      1 114.119.146.244 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 13.219.121.241 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.135.36.201 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.243.63.52 TIME_WAIT
      1 54.39.6.200 TIME_WAIT
      1 74.7.227.116 TIME_WAIT
      1 74.7.227.187 TIME_WAIT
      1 74.7.227.23 TIME_WAIT
      1 74.7.227.245 TIME_WAIT
      1 74.7.227.54 TIME_WAIT
      1 74.7.228.32 TIME_WAIT
      1 74.7.228.34 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.248.90.230 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 195.123.244.84 TIME_WAIT
      2 74.7.227.42 TIME_WAIT
     38 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 02:48:01 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 1 hour 53 minutes 43 seconds
   Server load: 0.53 0.84 0.90
   Total accesses: 28372 - Total Traffic: 550.3 MB - Total Duration: 13246055
   CPU Usage: u9.44 s3.84 cu280.04 cs195.28 - 7.16% CPU load
   4.16 requests/sec - 82.6 kB/second - 19.9 kB/request - 466.871 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_CR.._K._KWR_KK.WR._W_KK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol             VHost                                         Request
   0-2  63786 0/86/1843   _ 1.72 1    1    692968 0.0   1.74  28.22 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80        GET / HTTP/1.1
   1-2  62182 1/140/1738  C 1.96 5    1039 790095 0.5   2.06  30.61 92.205.19.191  http/1.1 developers.cloudsms.com.ng:80 GET /api.php?userid=10312800&password=lovely1&type=5&destinatio
   2-2  60040 0/278/1572  R 5.72 29   345  750063 0.0   3.55  30.63 157.20.32.131  http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   3-2  -     0/0/1533    . 0.00 48   0    728515 0.0   0.00  34.13 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   4-2  -     0/0/1795    . 0.00 43   0    767851 0.0   0.00  30.13 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   5-2  64444 0/69/1593   _ 1.16 1    1    746692 0.0   1.30  28.96 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80        GET / HTTP/1.1
   6-2  60050 2/215/1298  K 3.38 1    299  676360 64.3  3.31  32.18 66.249.70.36   http/1.1 support.cloudware.ng:443      GET /?c=1549577046 HTTP/1.1
   7-2  -     0/0/1277    . 0.00 44   0    611575 0.0   0.00  24.21 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   8-2  65443 0/37/1286   _ 1.11 1    336  872137 0.0   0.61  43.95 157.20.32.131  http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   9-2  69237 3/15/1411   K 0.24 1    294  709576 96.7  0.30  26.58 66.249.70.38   http/1.1 support.cloudware.ng:443      GET /?c=850484834 HTTP/1.1
   10-2 49206 0/454/1096  W 7.84 0    0    555991 0.0   8.53  21.70 157.20.32.131  http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   11-2 65782 0/21/1275   R 0.15 20   298  600218 0.0   0.26  24.20 66.249.70.33   http/1.1 support.cloudware.ng:443      GET /?c=3215657563 HTTP/1.1
   12-2 65450 0/54/994    _ 1.29 0    276  448968 0.0   1.25  18.81 54.243.63.52   http/1.1 blog.cloudsms.com.ng:443      GET /robots.txt HTTP/1.1
   13-2 65451 6/52/886    K 1.34 3    302  473902 194.7 1.20  18.61 66.249.70.39   http/1.1 support.cloudware.ng:443      GET /?c=660189658 HTTP/1.1
   14-2 49218 33/553/1112 K 8.09 0    5    531990 170.2 9.63  20.21 144.76.19.157  http/1.1 nigeriadecide.org:443         GET /polling_unit_category.php?state=Abia&lga=Obingwa&ward=Ibem
   15-2 -     0/0/1054    . 0.00 147  0    495972 0.0   0.00  21.90 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   16-2 49219 0/480/582   W 8.85 0    0    261112 0.0   8.94  10.29 66.249.70.35   http/1.1 support.cloudware.ng:443      GET /?c=3870165705 HTTP/1.1
   17-2 60064 0/216/406   R 3.55 16   63   142473 0.0   4.87  7.01  74.7.227.54    http/1.1 salutem.com.ng:443            GET /webfonts/fa-solid-900.woff2 HTTP/1.1
   18-2 -     0/0/663     . 0.00 104  0    336942 0.0   0.00  12.51 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   19-2 65795 0/27/796    _ 0.47 1    5    398235 0.0   0.70  15.41 44.223.116.149 http/1.1 nigeriadecide.org:443         GET /polling_unit_category.php/2019elections/2019elections/poll
   20-2 65962 0/66/570    W 1.38 0    0    279227 0.0   1.81  10.66 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   21-2 65978 0/30/699    _ 0.53 0    0    301527 0.0   0.56  11.67 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   22-2 65979 4/57/322    K 1.85 0    270  160199 123.0 1.17  5.24  66.249.70.32   http/1.1 support.cloudware.ng:443      GET /?c=3233763871 HTTP/1.1
   23-2 68125 11/39/549   K 0.51 1    64   218654 89.9  0.66  8.25  74.7.227.54    http/1.1 salutem.com.ng:443            GET /webfonts/fa-solid-900.ttf HTTP/1.1
   24-2 -     0/0/100     . 0.00 2471 0    37166  0.0   0.00  1.34  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   25-2 -     0/0/31      . 0.00 2473 0    5168   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-2 -     0/0/46      . 0.00 2475 0    6117   0.0   0.00  0.25  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-2 -     0/0/47      . 0.00 2476 0    3811   0.0   0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-2 -     0/0/163     . 0.00 1957 0    67061  0.0   0.00  2.53  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-2 -     0/0/26      . 0.00 2469 0    3509   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-2 -     0/0/301     . 0.00 2468 0    139777 0.0   0.00  6.21  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-2 -     0/0/57      . 0.00 4532 0    25684  0.0   0.00  0.85  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-2 -     0/0/47      . 0.00 4689 0    16198  0.0   0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-2 -     0/0/39      . 0.00 4687 0    6961   0.0   0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-2 -     0/0/197     . 0.00 4279 0    47049  0.0   0.00  5.02  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-2 -     0/0/41      . 0.00 4668 0    15983  0.0   0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-2 -     0/0/42      . 0.00 4669 0    10575  0.0   0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-2 -     0/0/316     . 0.00 3847 0    106128 0.0   0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-2 -     0/0/59      . 0.00 4540 0    27054  0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-2 -     0/0/22      . 0.00 4700 0    1654   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-2 -     0/0/149     . 0.00 4372 0    69209  0.0   0.00  2.91  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-2 -     0/0/56      . 0.00 4677 0    11193  0.0   0.00  0.59  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-2 -     0/0/60      . 0.00 4699 0    33165  0.0   0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-2 -     0/0/26      . 0.00 4680 0    1149   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-2 -     0/0/36      . 0.00 4698 0    5070   0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-2 -     0/0/30      . 0.00 4670 0    3132   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-2 -     0/0/32      . 0.00 4539 0    20691  0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-1 -     0/0/34      . 0.00 4883 0    9383   0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-1 -     0/0/8       . 0.00 4957 0    989    0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-1 -     0/0/57      . 0.00 4787 261  20913  0.0   0.00  0.84  66.249.70.39   http/1.1 support.cloudware.ng:443      GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 724
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...56)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 11259
   total entries replaced since starting: 0
   total entries expired since starting: 10533
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 32 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit