403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.02.03.txt
 ## swap threshold exceeded
## server overview
2025-11-11.02.03 load[1] mem[72/57] mysql[4/10] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1618          72          17         671         564
Swap:          1999        1306         693
 02:03:02 up  2:06,  0 users,  load average: 1.40, 1.29, 1.19
## system overview
top - 02:03:02 up  2:06,  0 users,  load average: 1.40, 1.29, 1.19
Tasks: 209 total,   5 running, 198 sleeping,   0 stopped,   6 zombie
%Cpu(s): 84.2 us, 15.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    83588 free,  1659528 used,   677184 buff/cache
KiB Swap:  2047996 total,   709884 free,  1338112 used.   576112 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1458324 205404   3728 S  66.7  8.5   2:08.37 /usr/sbin+
 92111 healtho+  20   0  478944  89824   4180 S  55.6  3.7   0:03.40 php-fpm: +
 92400 nigeria   20   0  400652  15936  10220 S  11.1  0.7   0:00.06 /opt/cpan+
 92430 cloudw    20   0  350316  16620  10324 S  11.1  0.7   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   5.6  0.0   0:18.15 [kswapd0]
 92231 nobody    20   0  277808  17172   3448 S   5.6  0.7   0:00.02 /usr/sbin+
     1 root      20   0   44408   3620   1692 S   0.0  0.1   0:11.46 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.71 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:09.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.76 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.48 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40240   5368   5120 S   0.0  0.2   0:03.45 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    272    160 S   0.0  0.0   0:00.52 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    340    248 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24896   1432    800 S   0.0  0.1   0:01.81 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.16 /usr/sbin+
   517 root      20   0  224148   3200    940 S   0.0  0.1   0:00.16 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1324    600 S   0.0  0.1   0:04.08 /usr/bin/+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   522 nscd      20   0  996544   1428    680 S   0.0  0.1   0:05.59 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    772    436 S   0.0  0.0   0:01.08 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    428    296 S   0.0  0.0   0:00.21 /usr/sbin+
   577 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3980    960 S   0.0  0.2   0:00.14 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.26 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  12656   2340 S   0.0  0.5   0:01.89 /usr/loca+
   916 systuser  20   0   14068     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.16 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:00.72 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.11 /usr/sbin+
   925 root      20   0  572372    720    156 S   0.0  0.0   0:00.75 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  31520   2596 S   0.0  1.3   0:04.51 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.16 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  232784   4832   4344 S   0.0  0.2   0:01.77 /usr/sbin+
   946 root      20   0  261292   6464   1724 S   0.0  0.3   0:02.17 cpsrvd (S+
   954 named     20   0  636928  36268   1456 S   0.0  1.5   0:04.59 /usr/sbin+
   965 root      20   0  385496    464    368 S   0.0  0.0   0:00.33 php-fpm: +
   972 cpanelc+  20   0   10452   3380   2316 R   0.0  0.1   0:06.76 /usr/loca+
   973 root      20   0  397344   1932    600 S   0.0  0.1   0:01.39 php-fpm: +
   975 root      20   0  392856    484    300 S   0.0  0.0   0:00.29 php-fpm: +
   979 root      20   0  436392    344    256 S   0.0  0.0   0:00.37 php-fpm: +
   980 root      20   0 1828116 509148   1172 S   0.0 21.0   0:29.90 /usr/loca+
   991 root      20   0  386112    444    240 S   0.0  0.0   0:00.29 php-fpm: +
  1070 dovenull  20   0   46912    828    556 S   0.0  0.0   0:00.12 dovecot/p+
  1071 dovenull  20   0   47380   2648   1776 S   0.0  0.1   0:00.12 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.01 dovecot/a+
  1073 root      20   0   10452    588    420 S   0.0  0.0   0:00.08 dovecot/l+
  1074 dovenull  20   0   46912    976    672 S   0.0  0.0   0:00.11 dovecot/p+
  1075 dovenull  20   0   47440   2612   1700 S   0.0  0.1   0:00.09 dovecot/i+
  1078 root      20   0   24528   1936    500 S   0.0  0.1   0:00.07 dovecot/c+
  1084 dovecot   20   0   13568    612    428 S   0.0  0.0   0:00.02 dovecot/s+
  1112 systuser  20   0  157704   2820    836 S   0.0  0.1   0:00.05 SonarPush+
  1127 root      20   0  248312   2732    712 S   0.0  0.1   0:03.75 /usr/loca+
  1152 dovecot   20   0   41056   1448   1012 S   0.0  0.1   0:00.17 dovecot/a+
  1157 wp-tool+  20   0  387556   3480   1616 S   0.0  0.1   0:00.15 /usr/bin/+
  1159 wp-tool+  20   0  410452  28104   1676 S   0.0  1.2   0:06.43 /usr/bin/+
  1210 root      20   0  209268  10316   2336 S   0.0  0.4   0:00.78 tailwatchd
  1211 root      20   0  262228  24688   6768 S   0.0  1.0   0:00.92 cpdavd - +
  1213 root      20   0  167452   3996   2624 S   0.0  0.2   0:00.24 dnsadmin +
  1667 root      20   0  299272    480    320 S   0.0  0.0   0:00.20 php-fpm: +
  1700 root      38  18  130416   1376    692 S   0.0  0.1   0:00.02 cpanellog+
  1945 root      20   0  267016   4792    532 S   0.0  0.2   0:00.65 /usr/sbin+
  1949 root      20   0   12748    324    212 S   0.0  0.0   0:00.88 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:00.74 /usr/loca+
  1951 root      20   0   12756    344    216 S   0.0  0.0   0:00.81 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.14 [kworker]
  5071 root      20   0  181364   7796   1100 S   0.0  0.3   0:06.11 lfd - sle+
  7555 root      20   0  271000 106048   3040 S   0.0  4.4   0:02.54 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 38388 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kworker/+
 48267 root      20   0  183052   1696   1152 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056    304    228 S   0.0  0.0   0:00.00 sleep 4h +
 64400 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 65152 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 74495 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 75646 nobody    20   0  277952  20340   4800 S   0.0  0.8   0:02.04 /usr/sbin+
 75648 nobody    20   0  277664  19824   4648 S   0.0  0.8   0:02.35 /usr/sbin+
 75679 nobody    20   0  277732  20176   4644 S   0.0  0.8   0:02.44 /usr/sbin+
 75686 nobody    20   0  277736  20420   4692 S   0.0  0.8   0:02.04 /usr/sbin+
 76235 nobody    20   0  277736  20000   4660 S   0.0  0.8   0:02.02 /usr/sbin+
 76237 nobody    20   0  277732  20660   4892 S   0.0  0.9   0:02.06 /usr/sbin+
 76568 nobody    20   0       0      0      0 Z   0.0  0.0   0:02.07 [httpd] <+
 78096 nobody    20   0  277740  20112   4732 S   0.0  0.8   0:01.90 /usr/sbin+
 78255 nobody    20   0  277736  20064   4720 S   0.0  0.8   0:01.66 /usr/sbin+
 79282 nobody    20   0  277736  19780   4660 S   0.0  0.8   0:02.01 /usr/sbin+
 80068 nobody    20   0  277648  19520   4468 S   0.0  0.8   0:01.87 /usr/sbin+
 80215 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 80872 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 81791 nobody    20   0  277800  19420   4492 S   0.0  0.8   0:01.25 /usr/sbin+
 83129 nobody    20   0  277612  19276   4596 S   0.0  0.8   0:00.95 /usr/sbin+
 83337 nobody    20   0  277932  19440   4592 S   0.0  0.8   0:00.98 /usr/sbin+
 83702 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84385 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84415 nobody    20   0  277664  19780   4424 S   0.0  0.8   0:01.02 /usr/sbin+
 85007 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 86492 nobody    20   0  277580  18748   4392 S   0.0  0.8   0:00.68 /usr/sbin+
 87919 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 88775 nobody    20   0  277932  18636   3968 S   0.0  0.8   0:00.33 /usr/sbin+
 89659 nobody    20   0  277800  18416   3892 S   0.0  0.8   0:00.27 /usr/sbin+
 89880 root      20   0 1275844  10328    600 S   0.0  0.4   0:00.05 /usr/bin/+
 89916 root      20   0 1277312  14944    560 S   0.0  0.6   0:00.06 /usr/bin/+
 90416 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90439 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90490 nobody    20   0  277800  18004   3804 S   0.0  0.7   0:00.21 /usr/sbin+
 90597 oysipao+  20   0   61552   6048   4452 S   0.0  0.2   0:00.01 dovecot/l+
 90734 oysipao+  20   0   29148   2728   2236 S   0.0  0.1   0:00.00 dovecot/q+
 91312 nobody    20   0  277800  17276   3472 S   0.0  0.7   0:00.09 /usr/sbin+
 91589 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 91592 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: roo+
 91980 nigeria   20   0  398116   9092   5220 S   0.0  0.4   0:00.11 php-fpm: +
 92106 workflo+  20   0  496708  36696   6280 S   0.0  1.5   0:00.30 php-fpm: +
 92115 workflo+  20   0  494304  32308   4700 S   0.0  1.3   0:00.22 php-fpm: +
 92138 nobody    20   0  277656  16604   3112 S   0.0  0.7   0:00.00 /usr/sbin+
 92255 oyotech+  20   0  385844   6396   2968 S   0.0  0.3   0:00.07 php-fpm: +
 92277 nobody    20   0  277808  17180   3384 S   0.0  0.7   0:00.01 /usr/sbin+
 92278 nobody    20   0  277808  17188   3392 S   0.0  0.7   0:00.01 /usr/sbin+
 92286 oyotech+  20   0  385844   6388   2968 S   0.0  0.3   0:00.03 php-fpm: +
 92318 oyotech+  20   0  385844   6376   2968 S   0.0  0.3   0:00.01 php-fpm: +
 92339 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 92340 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 92341 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 92342 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 92343 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 92344 oyotech+  20   0  385496    804    532 S   0.0  0.0   0:00.00 php-fpm: +
 92351 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92352 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92353 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92354 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92355 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92356 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92358 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92359 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92361 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 92363 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 92367 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 92369 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 92370 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 92372 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92373 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 92374 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 92375 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92376 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92378 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 92379 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92381 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 92386 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 92395 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 92396 pactpay   20   0  476724  17488  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 92398 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92426 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 92434 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov10   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      38388  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/u200:1]
root      64400  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:2]
root      65152  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:2]
root      74495  0.0  0.0      0     0 ?        S    01:39   0:00  \_ [kworker/1:1]
root      80215  0.0  0.0      0     0 ?        S    01:47   0:00  \_ [kworker/0:3]
root      80872  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:4]
root      83702  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:0]
root      84385  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:0]
root      85007  0.0  0.0      0     0 ?        S    01:54   0:00  \_ [kworker/1:3]
root      87919  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/0:1]
root      90416  0.0  0.0      0     0 ?        S    02:01   0:00  \_ [kworker/0:4]
root      90439  0.0  0.0      0     0 ?        S    02:01   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44408  3620 ?        Ss   Nov10   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40240  5368 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   272 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   340 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24896  1432 ?        Ss   Nov10   0:01 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3200 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Ss   Nov10   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 996544  1428 ?        Ssl  Nov10   0:05 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   772 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   428 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052  1696 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      92351  0.0  0.0 183048  2152 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92374  0.0  0.0 113284  1212 ?        Ss   02:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      92381  0.0  0.0 108052   360 ?        S    02:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      92386  0.0  0.0 113288  1516 ?        S    02:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      92435  0.0  0.0 153840  2092 ?        R    02:03   0:00  |               \_ ps auxf
root      92352  0.0  0.0 183048  2152 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92376  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      92353  0.0  0.0 183048  2148 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92373  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      92354  0.0  0.0 183048  2148 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92372  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      92355  0.0  0.0 183048  2148 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92375  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      92356  0.0  0.0 183048  2144 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92378  0.0  0.0  20164   804 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      92358  0.0  0.0 183048  2144 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92379  0.0  0.0  20164   804 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      92359  0.0  0.0 183048  2144 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92369  0.0  0.0  20164   984 ?        Ss   02:03   0:00  |   \_ jailshell (cloudsms) [92436] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  92436  0.0  0.0  20164   256 ?        S    02:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      92361  0.0  0.0 183048  2148 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92367  0.0  0.0  20164   960 ?        Ss   02:03   0:00  |   \_ jailshell (pactpay) [92395] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92395  0.0  0.0  20164   256 ?        S    02:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92396  2.0  0.7 476724 17488 ?        S    02:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      92363  0.0  0.0 183048  2148 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      92370  0.0  0.0  20164   968 ?        Ss   02:03   0:00      \_ jailshell (nigeria) [92398] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92398  0.0  0.0  20164   260 ?        S    02:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92400  6.0  0.6 400652 15936 ?        S    02:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    24 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3980 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.5 114016 12656 ?        Ssl  Nov10   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    24 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    56 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:00 /usr/sbin/sshd -D
root      91589  0.0  0.2 162436  5836 ?        Ss   02:02   0:00  \_ sshd: root [priv]
sshd      91592  0.0  0.1 115644  2624 ?        S    02:02   0:00      \_ sshd: root [net]
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912   828 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.1  47380  2648 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   588 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912   976 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.1  47440  2612 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1936 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   612 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41056  1448 ?        S    Nov10   0:00  \_ dovecot/auth
oysipao+  90597  0.0  0.2  61552  6048 ?        S    02:01   0:00  \_ dovecot/lmtp
oysipao+  90734  0.0  0.1  29148  2728 ?        S    02:01   0:00  \_ dovecot/quota-status -p postfix
root        925  0.0  0.0 572372   720 ?        Ssl  Nov10   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 31520 ?       SLsl Nov10   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.1 232784  4832 ?        Ssl  Nov10   0:01 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261292  6464 ?        Ss   Nov10   0:02 cpsrvd (SSL) - waiting for connections                   
root      92339  0.0  0.0      0     0 ?        Z    02:03   0:00  \_ [webmaild - serv] <defunct>
root      92340  0.0  0.0      0     0 ?        Z    02:03   0:00  \_ [webmaild - serv] <defunct>
root      92341  0.0  0.0      0     0 ?        Z    02:03   0:00  \_ [webmaild - serv] <defunct>
root      92342  0.0  0.0      0     0 ?        Z    02:03   0:00  \_ [webmaild - serv] <defunct>
root      92343  0.0  0.0      0     0 ?        Z    02:03   0:00  \_ [webmaild - serv] <defunct>
named       954  0.0  1.4 636928 36268 ?        Ssl  Nov10   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   464 ?        Rs   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  92255  1.4  0.2 385844  6396 ?        S    02:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  92286  0.7  0.2 385844  6388 ?        S    02:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  92318  0.5  0.2 385844  6376 ?        S    02:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  92344  0.0  0.0 385496   804 ?        S    02:03   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
cpanelc+    972  0.0  0.1  10452  3380 ?        Ss   Nov10   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1932 ?        Ss   Nov10   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   91980  0.4  0.3 398116  9092 ?        S    02:02   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  92106  3.0  1.5 496708 36696 ?        S    02:02   0:00  \_ php-fpm: pool blog_workflow-management-software_com
healtho+  92111 34.2  3.1 466144 77356 ?        S    02:02   0:03  \_ php-fpm: pool health_oyostate_gov_ng
workflo+  92115  2.2  1.3 494304 32308 ?        S    02:02   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root        975  0.0  0.0 392856   484 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   344 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.3 21.0 1828116 509148 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   444 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2820 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2732 ?        Rs   Nov10   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  4.3 271000 106048 ?       S    00:03   0:02  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3480 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 28104 ?        Ss   Nov10   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.4 209268 10316 ?        Ss   Nov10   0:00 tailwatchd
root       1211  0.0  1.0 262228 24688 ?        Ss   Nov10   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1213  0.0  0.1 167452  3996 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   480 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1376 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.6  8.4 1458324 205404 ?      Sl   Nov10   2:08 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4792 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12748   324 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12756   344 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    75646  0.1  0.8 277952 20340 ?        S    01:40   0:02  \_ /usr/sbin/httpd -k start
nobody    75648  0.1  0.8 277664 19824 ?        S    01:40   0:02  \_ /usr/sbin/httpd -k start
nobody    75679  0.1  0.8 277732 20176 ?        S    01:40   0:02  \_ /usr/sbin/httpd -k start
nobody    75686  0.1  0.8 277736 20420 ?        S    01:40   0:02  \_ /usr/sbin/httpd -k start
nobody    76235  0.1  0.8 277736 20000 ?        S    01:41   0:02  \_ /usr/sbin/httpd -k start
nobody    76237  0.1  0.8 277732 20660 ?        S    01:41   0:02  \_ /usr/sbin/httpd -k start
nobody    76568  0.1  0.0      0     0 ?        Z    01:41   0:02  \_ [httpd] <defunct>
nobody    78096  0.1  0.8 277740 20112 ?        S    01:44   0:01  \_ /usr/sbin/httpd -k start
nobody    78255  0.1  0.8 277736 20064 ?        S    01:44   0:01  \_ /usr/sbin/httpd -k start
nobody    79282  0.1  0.8 277736 19780 ?        S    01:45   0:02  \_ /usr/sbin/httpd -k start
nobody    80068  0.1  0.8 277648 19520 ?        S    01:46   0:01  \_ /usr/sbin/httpd -k start
nobody    81791  0.1  0.8 277800 19420 ?        S    01:49   0:01  \_ /usr/sbin/httpd -k start
nobody    83129  0.1  0.7 277612 19276 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody    83337  0.1  0.8 277932 19440 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody    84415  0.1  0.8 277664 19780 ?        S    01:53   0:01  \_ /usr/sbin/httpd -k start
cloudw    92430  0.0  0.6 350316 16620 ?        S    02:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    86492  0.1  0.7 277580 18748 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody    88775  0.1  0.7 277932 18636 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    89659  0.1  0.7 277800 18416 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    90490  0.1  0.7 277800 18004 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    91312  0.1  0.7 277800 17276 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    92138  0.0  0.6 277656 16604 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    92231  0.3  0.7 277808 17172 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    92277  0.2  0.7 277808 17180 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    92278  0.2  0.7 277808 17188 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.3 181364  7796 ?        Ss   00:00   0:06 lfd - sleeping
root      89880  0.0  0.4 1275844 10328 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      89916  0.0  0.6 1277312 14944 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 7566  Threads: 3  Questions: 953370  Slow queries: 0  Opens: 3288  Flush tables: 1  Open tables: 2000  Queries per second avg: 126.007
*************************** 1. row ***************************
     Id: 10576
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 10581
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 10587
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 130.94.236.180 TIME_WAIT
      1 14.102.30.31 TIME_WAIT
      1 151.241.38.2 TIME_WAIT
      1 15.235.27.178 TIME_WAIT
      1 160.224.62.46 TIME_WAIT
      1 ::1 TIME_WAIT
      1 202.81.208.43 TIME_WAIT
      1 216.73.216.175 TIME_WAIT
      1 47.128.16.149 TIME_WAIT
      1 47.128.36.143 TIME_WAIT
      1 47.128.41.22 TIME_WAIT
      1 47.128.42.102 TIME_WAIT
      1 47.128.59.62 TIME_WAIT
      1 47.128.96.186 TIME_WAIT
      1 54.39.136.77 TIME_WAIT
      1 66.249.70.37 TIME_WAIT
      1 74.7.230.27 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 47.128.122.111 TIME_WAIT
      4 52.169.5.4 TIME_WAIT
     11 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 02:03:02 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 6 minutes
   Server load: 2.17 1.46 1.24
   Total accesses: 36940 - Total Traffic: 996.4 MB - Total Duration: 20401597
   CPU Usage: u21.46 s7.46 cu474.99 cs371.09 - 11.6% CPU load
   4.89 requests/sec - 135.0 kB/second - 27.6 kB/request - 552.29 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

RCRK_KW.___WW_KKKKKKK......_.W.........._......_................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur    Conn  Child  Slot     Client     Protocol            VHost                                         Request
   0-0  83129 0/161/1867  R 4.79  9    7   1005141 0.0    4.86  50.10 47.128.122.111 http/1.1
   1-0  76568 1/398/1730  C 8.81  0    0   922117  0.2    14.85 50.73 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   2-0  81791 0/214/1935  R 5.61  9    397 1008698 0.0    5.84  46.48 47.128.122.111 http/1.1
   3-0  86492 2/123/1876  K 2.95  3    263 983734  66.1   3.26  42.65 66.249.70.33   http/1.1 support.cloudware.ng:443     GET /?c=2788988482 HTTP/1.1
   4-0  83337 0/181/1935  _ 4.33  0    264 1460456 0.0    4.49  61.07 66.249.70.34   http/1.1 support.cloudware.ng:443     GET /?c=3619084615 HTTP/1.1
   5-0  78096 3/405/1898  K 7.96  0    431 1073233 97.7   8.58  46.58 66.249.70.35   http/1.1 support.cloudware.ng:443     GET /?c=1938595698 HTTP/1.1
   6-0  78255 7/422/1796  W 5.91  0    0   1002698 214.6  9.09  45.57 66.249.70.32   http/1.1 support.cloudware.ng:443     GET /?c=3447925915 HTTP/1.1
   7-0  -     0/0/2002    . 0.00  1    0   1009052 0.0    0.00  58.46 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   8-0  76235 0/356/1857  _ 8.92  0    0   995553  0.0    23.18 59.84 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   9-0  89659 0/47/1695   _ 1.16  0    22  946330  0.0    1.18  42.34 104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443 GET /wp-content/plugins/contact-form-cfdb7/readme.txt HTTP/1.1
   10-0 76237 0/389/1696  _ 10.25 1    265 877889  0.0    10.80 42.16 66.249.70.35   http/1.1 support.cloudware.ng:443     GET /?c=75793342 HTTP/1.1
   11-0 84415 5/264/1705  W 3.48  0    0   908056  158.1  7.95  45.22 66.249.70.34   http/1.1 support.cloudware.ng:443     GET /?c=2367014759 HTTP/1.1
   12-0 79282 74/405/1448 W 6.50  0    0   803904  1882.7 10.26 36.23 45.134.225.130 http/1.1 health.oyostate.gov.ng:443   GET / HTTP/1.1
   13-0 90490 0/36/1015   _ 1.22  0    22  555565  0.0    0.92  27.47 104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443 GET /wp-content/plugins/disable-comments/readme.txt HTTP/1.1
   14-0 88775 16/56/1469  K 1.48  2    356 843615  491.5  1.62  37.00 66.249.70.38   http/1.1 support.cloudware.ng:443     GET /?c=985838283 HTTP/1.1
   15-0 91312 3/16/983    K 0.36  1    450 483943  97.6   0.41  23.21 66.249.70.36   http/1.1 support.cloudware.ng:443     GET /?c=2042460790 HTTP/1.1
   16-0 80068 94/402/1604 K 6.42  0    332 921512  559.9  9.46  39.76 45.134.225.130 http/1.1 health.oyostate.gov.ng:80    GET / HTTP/1.1
   17-0 92138 1/2/1281    K 0.02  0    5   683025  10.1   0.04  34.45 175.136.143.79 http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php?lga=Bali&state=Taraba&ward=Sunta
   18-0 92231 1/6/590     K 0.02  0    354 319468  34.6   0.07  16.73 66.249.70.37   http/1.1 support.cloudware.ng:443     GET /?c=1606950161 HTTP/1.1
   19-0 92277 1/3/587     K 0.01  1    347 298707  34.8   0.05  14.66 66.249.70.39   http/1.1 support.cloudware.ng:443     GET /?c=886604153 HTTP/1.1
   20-0 92278 1/3/609     K 0.01  1    357 311109  35.0   0.05  15.23 66.249.70.39   http/1.1 support.cloudware.ng:443     GET /?c=900044135 HTTP/1.1
   21-0 -     0/0/756     . 0.00  1317 0   436467  0.0    0.00  17.83 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   22-0 -     0/0/389     . 0.00  1310 0   189528  0.0    0.00  10.15 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   23-0 -     0/0/372     . 0.00  1288 0   184826  0.0    0.00  9.47  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   24-0 -     0/0/493     . 0.00  1249 0   234804  0.0    0.00  11.14 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   25-0 -     0/0/201     . 0.00  1328 0   83585   0.0    0.00  3.46  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   26-0 -     0/0/132     . 0.00  1322 0   63977   0.0    0.00  3.10  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   27-0 75646 0/442/615   _ 7.24  1    4   369959  0.0    10.60 15.02 3.208.156.9    http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php/blog/blog/2019elections/2019elec
   28-0 -     0/0/117     . 0.00  1111 0   78945   0.0    0.00  4.86  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   29-0 75648 0/396/488   W 10.82 0    0   297792  0.0    11.26 13.82 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   30-0 -     0/0/67      . 0.00  1112 0   36690   0.0    0.00  1.77  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   31-0 -     0/0/239     . 0.00  1289 0   99496   0.0    0.00  4.64  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   32-0 -     0/0/4       . 0.00  1325 0   178     0.0    0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   33-0 -     0/0/2       . 0.00  1326 0   3       0.0    0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   34-0 -     0/0/3       . 0.00  1327 0   4       0.0    0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   35-0 -     0/0/3       . 0.00  1321 0   6       0.0    0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   36-0 -     0/0/13      . 0.00  1282 0   5697    0.0    0.00  0.29  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00  1320 0   236     0.0    0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   38-0 -     0/0/281     . 0.00  541  0   158846  0.0    0.00  19.22 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   39-0 -     0/0/4       . 0.00  1323 0   264     0.0    0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   40-0 75679 0/438/438   _ 9.89  0    21  290494  0.0    13.42 13.42 104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443 GET /wp-content/plugins/complianz-gdpr/readme.txt HTTP/1.1
   41-0 -     0/0/4       . 0.00  1313 0   1003    0.0    0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   42-0 -     0/0/63      . 0.00  1091 0   33019   0.0    0.00  1.62  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   43-0 -     0/0/159     . 0.00  719  0   93527   0.0    0.00  19.16 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   44-0 -     0/0/9       . 0.00  1308 0   4423    0.0    0.00  0.20  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   45-0 -     0/0/18      . 0.00  1252 0   7447    0.0    0.00  0.41  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   46-0 -     0/0/13      . 0.00  1278 0   5454    0.0    0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   47-0 75686 0/470/470   _ 6.92  0    14  308920  0.0    9.85  9.85  104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443 GET /wp-content/plugins/creame-whatsapp-me/readme.txt HTTP/1.1
   48-0 -     0/0/6       . 0.00  1315 0   2176    0.0    0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 832
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...34)
   index usage: 14%, cache usage: 20%
   total entries stored since starting: 19754
   total entries replaced since starting: 0
   total entries expired since starting: 18906
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 130 miss
   total removes since starting: 17 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit