403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.03.36.txt
 ## swap threshold exceeded
## server overview
2025-11-10.03.36 load[0] mem[67/64] mysql[2/26] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1398          73           6         891         773
Swap:          1999        1475         524
 03:36:01 up  2:42,  0 users,  load average: 0.59, 0.90, 0.75
## system overview
top - 03:36:02 up  2:42,  0 users,  load average: 0.59, 0.90, 0.75
Tasks: 201 total,   2 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 83.9 us, 12.9 sy,  0.0 ni,  0.0 id,  3.2 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    79696 free,  1430240 used,   910364 buff/cache
KiB Swap:  2047996 total,   537880 free,  1510116 used.   793940 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1466700 212304   4352 S  80.0  8.8   2:57.64 /usr/sbin+
 96893 healtho+  20   0  455192  65256   4212 S  66.7  2.7   0:01.48 php-fpm: +
 97024 nigeria   20   0  400652  15936  10220 S  13.3  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44420   3324   1500 S   0.0  0.1   0:13.85 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.89 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:11.47 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.53 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.98 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:02.32 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.58 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [kworker/+
   357 root      20   0   39500   5516   5336 S   0.0  0.2   0:05.36 /usr/lib/+
   385 root      20   0   45352     56     52 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    208    108 S   0.0  0.0   0:00.86 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    824    552 S   0.0  0.0   0:01.39 /usr/lib/+
   482 dbus      20   0   58584   1216    604 S   0.0  0.1   0:05.38 /usr/bin/+
   494 rpc       20   0   69256     36     32 S   0.0  0.0   0:00.02 /sbin/rpc+
   521 root      20   0   52852      0      0 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    348    264 S   0.0  0.0   0:00.21 /usr/sbin+
   528 root      20   0  224276   3144    860 S   0.0  0.1   0:00.21 queueproc+
   533 root      20   0  152780     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1064    792 S   0.0  0.0   0:02.34 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1184    680 S   0.0  0.0   0:04.95 /usr/sbin+
   562 root      20   0   24208     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    424    292 S   0.0  0.0   0:00.28 /usr/sbin+
   583 root      20   0  108296     40     36 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820    432    304 S   0.0  0.0   0:00.17 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:04.47 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  35408   5996 S   0.0  1.5   0:05.59 /usr/loca+
   941 root      20   0   51656    392    228 S   0.0  0.0   0:00.15 /usr/sbin+
   942 root      20   0  153404    264    180 S   0.0  0.0   0:00.21 pure-ftpd+
   943 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0  111304    372    268 S   0.0  0.0   0:01.20 /usr/sbin+
   945 systuser  20   0   13012      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1901856 553164    764 S   0.0 22.9   0:35.21 /usr/loca+
   950 root      20   0  436392    328    248 S   0.0  0.0   0:00.47 php-fpm: +
   952 named     20   0  718804  20320   1492 S   0.0  0.8   0:07.51 /usr/sbin+
   960 root      20   0  392856    344    264 S   0.0  0.0   0:00.41 php-fpm: +
   961 root      20   0  240976   1792   1516 S   0.0  0.1   0:02.65 /usr/sbin+
   962 root      20   0  397344   2532    596 S   0.0  0.1   0:02.00 php-fpm: +
   965 root      20   0  261416   5860   1732 S   0.0  0.2   0:02.28 cpsrvd (S+
   967 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.22 /usr/bin/+
   970 cpanelc+  20   0   10484   3420   2316 S   0.0  0.1   0:07.88 /usr/loca+
   982 root      20   0  385496    436    348 S   0.0  0.0   0:00.40 php-fpm: +
   985 root      20   0  386112    436    348 S   0.0  0.0   0:00.37 php-fpm: +
   986 systuser  20   0  113272     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 systuser  20   0  114016   8756   2716 S   0.0  0.4   0:02.38 /usr/loca+
   993 root      20   0  572372    748    276 S   0.0  0.0   0:00.94 /usr/bin/+
  1087 dovecot   20   0   10320    412    300 S   0.0  0.0   0:00.03 dovecot/a+
  1168 root      20   0  248160   2780    756 S   0.0  0.1   0:03.96 /usr/loca+
  1181 systuser  20   0  157704   2936    960 S   0.0  0.1   0:00.07 SonarPush+
  1219 wp-tool+  20   0  410452   9328   1160 S   0.0  0.4   0:08.26 /usr/bin/+
  1220 wp-tool+  20   0  387528   2544   1268 S   0.0  0.1   0:00.17 /usr/bin/+
  1249 root      20   0  209356   4236    988 S   0.0  0.2   0:01.02 tailwatchd
  1252 root      20   0  183900     48     48 S   0.0  0.0   0:00.87 cpdavd - +
  1253 root      20   0  167452   1200    660 S   0.0  0.0   0:00.24 dnsadmin +
  1749 root      20   0  299272    388    240 S   0.0  0.0   0:00.26 php-fpm: +
  1799 root      38  18  130416    712     60 S   0.0  0.0   0:00.03 cpanellog+
  1947 root      20   0  267112   5080    560 S   0.0  0.2   0:01.01 /usr/sbin+
  2095 root      20   0  181884   6636   1104 S   0.0  0.3   0:08.89 lfd - sle+
  5800 root      20   0  183048     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.22 [kworker]
  6471 root      20   0  265416  43624   1160 S   0.0  1.8   0:02.03 spamd chi+
  6472 root      20   0  248160   1352    444 S   0.0  0.1   0:00.00 spamd chi+
 22574 root      20   0   12868    240    120 S   0.0  0.0   0:00.73 /usr/loca+
 22575 root      20   0   12732     68      0 S   0.0  0.0   0:00.61 /usr/loca+
 22576 root      20   0   12904    400    212 S   0.0  0.0   0:00.66 /usr/loca+
 22578 dovenull  20   0   46912    616    384 S   0.0  0.0   0:00.11 dovecot/p+
 22579 dovenull  20   0   48028   2336   1580 S   0.0  0.1   0:00.12 dovecot/i+
 22580 root      20   0   10452    480    316 S   0.0  0.0   0:00.09 dovecot/l+
 22581 dovenull  20   0   46912    552    324 S   0.0  0.0   0:00.14 dovecot/p+
 22582 dovenull  20   0   47628   2444   1704 S   0.0  0.1   0:00.12 dovecot/i+
 22583 root      20   0   24528   1764    492 S   0.0  0.1   0:00.06 dovecot/c+
 22584 dovecot   20   0   13572    632    440 S   0.0  0.0   0:00.01 dovecot/s+
 22588 dovecot   20   0   41152   1436   1016 S   0.0  0.1   0:00.20 dovecot/a+
 22589 root      20   0   53252     68     68 S   0.0  0.0   0:00.04 /usr/loca+
 73506 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75077 nobody    20   0  278020  10420   3824 S   0.0  0.4   0:02.31 /usr/sbin+
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 77282 root      20   0 1341636    292     44 S   0.0  0.0   0:00.08 /usr/bin/+
 77322 root      20   0 1277312   2172     44 S   0.0  0.1   0:00.07 /usr/bin/+
 78152 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 80610 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 84180 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 84184 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 85348 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 87079 nobody    20   0  277992  10428   3612 S   0.0  0.4   0:01.03 /usr/sbin+
 87318 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 88876 nobody    20   0  277984   9664   3476 S   0.0  0.4   0:00.85 /usr/sbin+
 90988 worencom  20   0   38464   1376    900 S   0.0  0.1   0:00.00 dovecot/i+
 91392 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92409 root      30  10  132964     28     24 S   0.0  0.0   0:00.00 ConfigSer+
 92420 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 8028
 94261 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 94310 nobody    20   0  277660  10056   3808 S   0.0  0.4   0:00.35 /usr/sbin+
 95053 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 95376 root      20   0   41052   2804   2140 S   0.0  0.1   0:00.00 dovecot/a+
 95726 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95832 nobody    20   0  277868  17912   3800 S   0.0  0.7   0:00.18 /usr/sbin+
 95844 nobody    20   0  278000  18284   3940 S   0.0  0.8   0:00.10 /usr/sbin+
 95845 nobody    20   0  277596  17704   3800 S   0.0  0.7   0:00.11 /usr/sbin+
 95961 nobody    20   0  277596  17912   3872 S   0.0  0.7   0:00.08 /usr/sbin+
 95973 nobody    20   0  277980  18256   3856 S   0.0  0.8   0:00.08 /usr/sbin+
 95974 nobody    20   0  277732  18220   4020 S   0.0  0.8   0:00.12 /usr/sbin+
 95975 nobody    20   0  277856  17988   3856 S   0.0  0.7   0:00.14 /usr/sbin+
 95977 nobody    20   0  277864  17624   3624 S   0.0  0.7   0:00.07 /usr/sbin+
 95979 nobody    20   0  277996  18484   3888 S   0.0  0.8   0:00.10 /usr/sbin+
 96504 nobody    20   0  277596  17572   3788 S   0.0  0.7   0:00.07 /usr/sbin+
 96766 nigeria   20   0  397064   5396   2368 S   0.0  0.2   0:00.01 php-fpm: +
 96855 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 96856 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 96949 root      20   0  157100   4984   3696 S   0.0  0.2   0:00.00 sshd: unk+
 96950 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 96951 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 96964 oyotech+  20   0  385844   6144   2832 S   0.0  0.3   0:00.00 php-fpm: +
 96968 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 96969 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96970 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96971 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96972 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96973 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96974 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96976 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96977 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96978 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96979 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96980 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96982 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96985 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96986 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96988 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96991 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 96992 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96993 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96994 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 96995 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96996 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96997 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 96998 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96999 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97000 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 97003 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 97006 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 97015 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97018 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 97023 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 97047 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 97049 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 97050 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 97051 cloudsms  20   0  396400  11424   7992 R   0.0  0.5   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:54   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:04  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      73506  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:1]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      78152  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/1:3]
root      80610  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:2]
root      84180  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/0:1]
root      84184  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/1:2]
root      85348  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/0:3]
root      87318  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:4]
root      91392  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:1]
root      94261  0.0  0.0      0     0 ?        S    03:32   0:00  \_ [kworker/0:0]
root      95053  0.0  0.0      0     0 ?        S    03:32   0:00  \_ [kworker/u200:2]
root      95726  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44420  3324 ?        Ss   00:54   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  5516 ?        Ss   00:54   0:05 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352    56 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   208 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   824 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58584  1216 ?        Ss   00:54   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256    36 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852     0 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   348 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.1 224276  3144 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780    52 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1064 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    28 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1184 ?        Ssl  00:54   0:04 /usr/sbin/nscd
root        562  0.0  0.0  24208    32 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   424 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048    28 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      96968  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96991  0.0  0.0 113284  1212 ?        Ss   03:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      97003  0.0  0.0 108052   360 ?        S    03:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      97006  0.0  0.0 113288  1516 ?        S    03:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      97052  0.0  0.0 153840  2096 ?        R    03:36   0:00  |               \_ ps auxf
root      96969  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96993  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      96970  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96994  0.0  0.0  20164   984 ?        Ss   03:36   0:00  |   \_ jailshell (cloudsms) [97049] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  97049  0.0  0.0  20164   256 ?        S    03:36   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  97050  0.0  0.0 113284  1212 ?        S    03:36   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  97051  0.0  0.6 400652 14880 ?        R    03:36   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php
root      96971  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96992  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      96972  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96995  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      96973  0.0  0.0 183044  2148 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96988  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      96974  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96999  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      96976  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96996  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      96977  0.0  0.0 183044  2140 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96985  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      96978  0.0  0.0 183044  2140 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96998  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      96979  0.0  0.0 183044  2140 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96986  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      96980  0.0  0.0 183044  2144 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      97000  0.0  0.0  20164   964 ?        Ss   03:36   0:00  |   \_ jailshell (pactpay) [97015] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97015  0.0  0.0  20164   260 ?        S    03:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97018  1.0  0.7 476724 17484 ?        S    03:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      96982  0.0  0.0 183044  2140 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      96997  0.0  0.0  20164   968 ?        Ss   03:36   0:00      \_ jailshell (nigeria) [97023] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97023  0.0  0.0  20164   256 ?        S    03:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97024  3.0  0.6 400652 15936 ?        S    03:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    40 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704     0 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.0  90820   432 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.4 5654048 35408 ?       SLsl 00:54   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656   392 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   412 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.0  46912   616 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.0  48028  2336 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452   480 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.0  46912   552 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47628  2444 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.0  24528  1764 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572   632 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41152  1436 ?        S    01:28   0:00  \_ dovecot/auth
worencom  90988  0.0  0.0  38464  1376 ?        S    03:26   0:00  \_ dovecot/imap
root      95376  0.0  0.1  41052  2804 ?        S    03:33   0:00  \_ dovecot/auth -w
root        942  0.0  0.0 153404   264 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   372 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root      96855  0.0  0.1 111304  4268 ?        Ss   03:35   0:00  \_ sshd: [accepted]
sshd      96856  0.0  0.1 115644  2628 ?        S    03:35   0:00  |   \_ sshd: [net]
root      96949  0.0  0.2 157100  4984 ?        Ss   03:35   0:00  \_ sshd: unknown [priv]
sshd      96951  0.0  0.1 115644  2628 ?        S    03:35   0:00      \_ sshd: unknown [net]
systuser    945  0.0  0.0  13012     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.3 22.8 1901856 553164 ?      Ssl  00:54   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.0 436392   328 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  0.8 718804 20320 ?        Ssl  00:54   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   344 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.0 240976  1792 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  2532 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   96766  0.0  0.2 397064  5396 ?        S    03:35   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  96893 21.1  2.6 455192 65256 ?        S    03:35   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root        965  0.0  0.2 261416  5860 ?        Ss   00:54   0:02 cpsrvd (SSL) - waiting for connections                   
root      96950  0.0  0.0      0     0 ?        Z    03:35   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.0 445028     0 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3420 ?        Rs   00:54   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   436 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  96964  0.0  0.2 385844  6144 ?        S    03:36   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        985  0.0  0.0 386112   436 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    56 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.3 114016  8756 ?        Ssl  00:54   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   748 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  0.1 248160  2780 ?        Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  1.8 265416 43624 ?        S    01:00   0:02  \_ spamd child
root       6472  0.0  0.0 248160  1352 ?        S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2936 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  0.3 410452  9328 ?        Ss   00:54   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.1 387528  2544 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.1 209356  4236 ?        Ss   00:54   0:01 tailwatchd
root       1252  0.0  0.0 183900    48 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.0 167452  1200 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   388 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416   712 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8  8.7 1466700 212304 ?      Sl   00:54   2:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.2 267112  5080 ?        Ss   00:54   0:01 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12868   240 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732    68 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12904   400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.0  53252    68 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    75077  0.0  0.4 278020 10420 ?        S    02:57   0:02  \_ /usr/sbin/httpd -k start
nobody    87079  0.0  0.4 277992 10428 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    88876  0.1  0.3 277984  9664 ?        S    03:22   0:00  \_ /usr/sbin/httpd -k start
nobody    94310  0.1  0.4 277660 10056 ?        S    03:32   0:00  \_ /usr/sbin/httpd -k start
nobody    95832  0.1  0.7 277868 17912 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95844  0.0  0.7 278000 18284 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95845  0.0  0.7 277596 17704 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95961  0.0  0.7 277596 17912 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95973  0.0  0.7 277980 18256 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95974  0.1  0.7 277732 18220 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95975  0.1  0.7 277856 17988 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95977  0.0  0.7 277864 17624 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    95979  0.1  0.7 277996 18484 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    96504  0.1  0.7 277596 17572 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.2 181884  6636 ?        Ss   00:54   0:08 lfd - sleeping
oysipao+   5913  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152    36 ?        S    01:00   0:00  \_ [kworker]
root      77282  0.0  0.0 1341636  292 ?        Ssl  03:00   0:00 /usr/bin/cspdaemon
root      77322  0.0  0.0 1277312 2172 ?        Ssl  03:00   0:00 /usr/bin/checkstatus
root      92409  0.0  0.0 132964    28 ?        SN   03:29   0:00 ConfigServer Version Check
root      92420  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 8028
## mysql stats
Uptime: 9708  Threads: 5  Questions: 1140829  Slow queries: 0  Opens: 5637  Flush tables: 1  Open tables: 2000  Queries per second avg: 117.514
*************************** 1. row ***************************
     Id: 17956
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-10' LIMIT 1
*************************** 2. row ***************************
     Id: 17958
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 17960
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 17961
   User: cloudsms_robocal
   Host: localhost
     db: cloudsms_robocall
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 17963
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 157.55.39.16 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.153.119.119 TIME_WAIT
      1 47.128.124.171 TIME_WAIT
      1 54.39.210.199 TIME_WAIT
      1 74.7.227.137 TIME_WAIT
      1 74.7.227.171 TIME_WAIT
      1 74.7.227.246 TIME_WAIT
      1 74.7.227.31 TIME_WAIT
      1 74.7.227.60 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 144.172.94.216 TIME_WAIT
      2 74.7.227.197 TIME_WAIT
      2 74.7.227.243 TIME_WAIT
      4 104.248.90.230 TIME_WAIT
      5 127.0.0.1 TIME_WAIT
     39 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 03:36:02 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 2 hours 41 minutes 43 seconds
   Server load: 0.59 0.90 0.75
   Total accesses: 40178 - Total Traffic: 774.2 MB - Total Duration: 18768852
   CPU Usage: u4.4 s2.2 cu414.14 cs285.66 - 7.28% CPU load
   4.14 requests/sec - 81.7 kB/second - 19.7 kB/request - 467.143 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

.WK...W......._._...KR_.__KK.K._................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol            VHost                                         Request
   0-2  -     0/0/2442   . 0.00 32   0   978462  0.0   0.00  38.81 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   1-2  94310 0/63/2388  W 1.48 0    0   1105882 0.0   1.32  43.19 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   2-2  96504 5/16/2197  K 0.24 1    253 1079164 157.4 0.27  41.74 66.249.70.34   http/1.1 support.cloudware.ng:443     GET /?c=3401733056 HTTP/1.1
   3-2  -     0/0/2089   . 0.00 92   0   1017557 0.0   0.00  45.52 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   4-2  -     0/0/2464   . 0.00 79   0   1040539 0.0   0.00  40.90 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   5-2  -     0/0/2385   . 0.00 18   0   1091071 0.0   0.00  41.89 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   6-2  88876 0/175/1904 W 3.77 0    0   954962  0.0   3.50  42.39 157.20.32.131  http/1.1 health.oyostate.gov.ng:443   POST //xmlrpc.php HTTP/1.1
   7-2  -     0/0/1748   . 0.00 93   0   861240  0.0   0.00  33.55 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   8-2  -     0/0/1995   . 0.00 83   0   1192200 0.0   0.00  54.43 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   9-2  -     0/0/1858   . 0.00 1    0   918471  0.0   0.00  35.22 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   10-2 -     0/0/1437   . 0.00 85   0   725735  0.0   0.00  28.18 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   11-2 -     0/0/1910   . 0.00 80   0   901215  0.0   0.00  34.52 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   12-2 -     0/0/1564   . 0.00 86   4   724330  0.0   0.00  28.83 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   13-2 -     0/0/1421   . 0.00 45   0   666413  0.0   0.00  26.82 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   14-2 95832 0/32/1493  _ 0.81 0    296 689687  0.0   0.78  28.92 66.249.70.32   http/1.1 support.cloudware.ng:443     GET /?c=2721292522 HTTP/1.1
   15-2 -     0/0/1400   . 0.00 88   0   649198  0.0   0.00  28.04 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   16-2 75077 0/454/1103 _ 9.48 0    0   567227  0.0   15.96 27.36 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   17-2 -     0/0/452    . 0.00 90   0   161671  0.0   0.00  7.60  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   18-2 -     0/0/912    . 0.00 81   0   462994  0.0   0.00  17.65 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   19-2 -     0/0/1134   . 0.00 84   0   572310  0.0   0.00  22.02 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   20-2 95844 1/24/1066  K 0.36 0    340 475831  35.3  0.38  20.51 66.249.70.33   http/1.1 support.cloudware.ng:443     GET /?c=1489785512 HTTP/1.1
   21-2 87079 0/240/1104 R 3.97 3    48  535883  0.0   10.96 24.92 104.248.90.230 http/1.1 health.oyostate.gov.ng:443
   22-2 95845 0/25/913   _ 0.50 0    14  398014  0.0   0.41  14.70 104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443 POST /api/graphql HTTP/1.1
   23-2 -     0/0/619    . 0.00 91   0   245356  0.0   0.00  9.36  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   24-2 95961 0/24/124   _ 0.35 1    344 43785   0.0   0.25  1.59  157.20.32.131  http/1.1 health.oyostate.gov.ng:443   POST //xmlrpc.php HTTP/1.1
   25-2 95973 0/22/53    _ 0.32 2    1   15057   0.0   0.36  0.49  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80       GET / HTTP/1.1
   26-2 95974 5/26/72    K 0.45 2    270 16587   158.2 0.85  1.10  66.249.70.39   http/1.1 support.cloudware.ng:443     GET /?c=2739997031 HTTP/1.1
   27-2 95975 2/27/74    K 0.64 0    305 18470   68.9  0.65  0.82  66.249.70.35   http/1.1 support.cloudware.ng:443     GET /?c=3100666063 HTTP/1.1
   28-2 -     0/0/165    . 0.00 87   0   67071   0.0   0.00  2.55  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   29-2 95977 13/24/50   K 0.19 3    7   8570    67.2  0.26  0.38  144.76.19.157  http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php?state=Delta&lga=Okpe&ward=Oha%20
   30-2 -     0/0/303    . 0.00 89   0   139786  0.0   0.00  6.24  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   31-2 95979 0/19/76    _ 0.42 0    6   35337   0.0   0.43  1.27  3.224.104.67   http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php/blog/images/blog/polling_unit_ca
   32-2 -     0/0/59     . 0.00 39   0   18455   0.0   0.00  0.63  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   33-2 -     0/0/39     . 0.00 7567 0   6961    0.0   0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   34-2 -     0/0/197    . 0.00 7160 0   47049   0.0   0.00  5.02  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   35-2 -     0/0/41     . 0.00 7548 0   15983   0.0   0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   36-2 -     0/0/42     . 0.00 7549 0   10575   0.0   0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   37-2 -     0/0/316    . 0.00 6727 0   106128  0.0   0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   38-2 -     0/0/59     . 0.00 7421 0   27054   0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   39-2 -     0/0/22     . 0.00 7580 0   1654    0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   40-2 -     0/0/149    . 0.00 7253 0   69209   0.0   0.00  2.91  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   41-2 -     0/0/56     . 0.00 7557 0   11193   0.0   0.00  0.59  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   42-2 -     0/0/60     . 0.00 7579 0   33165   0.0   0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   43-2 -     0/0/26     . 0.00 7560 0   1149    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   44-2 -     0/0/36     . 0.00 7578 0   5070    0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   45-2 -     0/0/30     . 0.00 7550 0   3132    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   46-2 -     0/0/32     . 0.00 7420 0   20691   0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   47-1 -     0/0/34     . 0.00 7763 0   9383    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   48-1 -     0/0/8      . 0.00 7837 0   989     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   49-1 -     0/0/57     . 0.00 7667 261 20913   0.0   0.00  0.84  66.249.70.39   http/1.1 support.cloudware.ng:443     GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 775
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 1...40)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 18223
   total entries replaced since starting: 0
   total entries expired since starting: 17444
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 61 miss
   total removes since starting: 4 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit