403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.33.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.33 load[1] mem[61/75] mysql[1/8] httpd[22]
              total        used        free      shared  buff/cache   available
Mem:           2363        1382         252          16         728         801
Swap:          1999        1686         313
 01:33:01 up  5:30,  0 users,  load average: 1.45, 1.43, 1.14
## system overview
top - 01:33:02 up  5:30,  0 users,  load average: 1.45, 1.43, 1.14
Tasks: 212 total,   6 running, 203 sleeping,   0 stopped,   3 zombie
%Cpu(s): 65.6 us, 34.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   228560 free,  1445304 used,   746436 buff/cache
KiB Swap:  2047996 total,   321092 free,  1726904 used.   790920 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 210932   3652 S  37.5  8.7   4:36.48 /usr/sbin+
 55351 healtho+  20   0  459288  69476   4188 R  31.2  2.9   0:03.20 php-fpm: +
 55701 nigeria   20   0  400652  15932  10216 R  12.5  0.7   0:00.02 /opt/cpan+
  2065 root      20   0   12888    384    212 S   6.2  0.0   0:02.21 /usr/loca+
 52868 nobody    20   0  277784  17492   3624 S   6.2  0.7   0:00.28 /usr/sbin+
 55693 saboakin  20   0       0      0      0 Z   6.2  0.0   0:00.01 [php-cgi]+
 55695 pactpay   20   0  476460  15964  10408 S   6.2  0.7   0:00.01 /opt/cpan+
 55698 cloudw    20   0  352096  15232  10128 S   6.2  0.6   0:00.01 /opt/cpan+
 55706 cloudsms  20   0  396592  11424   7992 R   6.2  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44428   3404   1492 S   0.0  0.1   0:27.97 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.35 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.95 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:20.32 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.89 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.78 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.59 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.43 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.38 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.94 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   6424   6180 S   0.0  0.3   0:11.45 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:01.81 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.49 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.44 /usr/sbin+
   501 polkitd   20   0  612240    852    468 S   0.0  0.0   0:02.67 /usr/lib/+
   503 root      20   0  152780     52     24 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3172    912 S   0.0  0.1   0:00.28 queueproc+
   507 root      20   0   52852    284    196 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:10.17 /usr/bin/+
   519 nscd      20   0 1062080   1320    592 S   0.0  0.1   0:16.36 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.55 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3696    784 S   0.0  0.2   0:00.75 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13232   2304 S   0.0  0.5   0:04.86 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.41 pure-ftpd+
   931 root      20   0   51508    460    300 S   0.0  0.0   0:00.28 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.77 /usr/bin/+
   933 telegraf  20   0 5654048  34780   5836 S   0.0  1.4   0:11.07 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.44 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.55 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    200    116 S   0.0  0.0   0:00.60 php-fpm: +
   961 named     20   0  636988  29612   1716 S   0.0  1.2   0:11.20 /usr/sbin+
   964 root      20   0  273744   5988   5568 S   0.0  0.2   0:05.34 /usr/sbin+
   981 root      20   0  436392    380    292 S   0.0  0.0   0:00.71 php-fpm: +
   984 root      20   0  385496    544    448 S   0.0  0.0   0:00.59 php-fpm: +
   985 root      20   0  261288   6008   1632 S   0.0  0.2   0:03.19 cpsrvd (S+
   989 root      20   0  392856    128     44 S   0.0  0.0   0:00.57 php-fpm: +
   992 root      20   0 1828184 254380     40 S   0.0 10.5   0:32.13 /usr/loca+
  1000 root      20   0  397344   1876    600 S   0.0  0.1   0:02.71 php-fpm: +
  1006 cpanelc+  20   0   10656   3708   2316 S   0.0  0.2   0:16.28 /usr/loca+
  1075 dovenull  20   0   47264   2316   1528 S   0.0  0.1   0:00.41 dovecot/p+
  1076 dovenull  20   0   48324   2688   1568 S   0.0  0.1   0:00.34 dovecot/i+
  1077 dovecot   20   0   10320    284    176 S   0.0  0.0   0:00.11 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.24 dovecot/l+
  1079 dovenull  20   0   47112   2196   1468 S   0.0  0.1   0:00.32 dovecot/p+
  1080 dovenull  20   0   48000   2400   1432 S   0.0  0.1   0:00.25 dovecot/i+
  1084 root      20   0   24396   2128    500 S   0.0  0.1   0:00.14 dovecot/c+
  1088 dovecot   20   0   13568    424    248 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   3000    996 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1496    964 S   0.0  0.1   0:00.79 dovecot/a+
  1172 root      20   0  248152   3724    688 S   0.0  0.2   0:05.21 /usr/loca+
  1173 wp-tool+  20   0  387556   3216   1348 S   0.0  0.1   0:00.23 /usr/bin/+
  1174 wp-tool+  20   0  410616  17824   1268 S   0.0  0.7   0:16.45 /usr/bin/+
  1232 root      20   0  209372   8248   1724 S   0.0  0.3   0:02.52 tailwatchd
  1234 root      20   0  167452   4272   2900 S   0.0  0.2   0:00.41 dnsadmin +
  1237 root      20   0  262224  21048   3120 S   0.0  0.9   0:01.13 cpdavd - +
  1642 root      20   0  299272    452    288 S   0.0  0.0   0:00.53 php-fpm: +
  1702 root      38  18  130416   1360    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.00 /usr/sbin+
  2063 root      20   0   12848    376    208 S   0.0  0.0   0:02.36 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.00 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  45700   1124 S   0.0  1.9   0:02.80 spamd chi+
  7886 root      20   0  248152   2552    400 S   0.0  0.1   0:00.00 spamd chi+
 20440 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 23292 root      20   0  183048   1416    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10708    560 S   0.0  0.4   0:00.07 /usr/bin/+
 23946 root      20   0 1277056  11532    560 S   0.0  0.5   0:00.06 /usr/bin/+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 31529 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 39115 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 45517 nobody    20   0  277928  18916   4156 S   0.0  0.8   0:00.92 /usr/sbin+
 45600 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.30 [kworker]
 48281 nobody    20   0  278100  19380   4236 S   0.0  0.8   0:00.67 /usr/sbin+
 48337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49839 nobody    20   0  277720  18364   4060 S   0.0  0.8   0:00.57 /usr/sbin+
 50931 nobody    20   0  277720  17916   3760 S   0.0  0.7   0:00.37 /usr/sbin+
 50936 nobody    20   0  277808  17808   3724 S   0.0  0.7   0:00.42 /usr/sbin+
 51051 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51767 nobody    20   0  277792  17652   3752 S   0.0  0.7   0:00.42 /usr/sbin+
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 52820 nobody    20   0  277784  17968   3720 S   0.0  0.7   0:00.32 /usr/sbin+
 53884 nobody    20   0  277784  17540   3608 S   0.0  0.7   0:00.24 /usr/sbin+
 53901 nobody    20   0  277784  17580   3652 S   0.0  0.7   0:00.21 /usr/sbin+
 53997 nobody    20   0  277560  17528   3628 S   0.0  0.7   0:00.20 /usr/sbin+
 53999 nobody    20   0  277784  17684   3704 S   0.0  0.7   0:00.21 /usr/sbin+
 54000 nobody    20   0  277828  17768   3680 S   0.0  0.7   0:00.20 /usr/sbin+
 54754 nobody    20   0  277784  17300   3436 S   0.0  0.7   0:00.09 /usr/sbin+
 54755 nobody    20   0  277812  17272   3444 S   0.0  0.7   0:00.13 /usr/sbin+
 54762 nobody    20   0  277784  17388   3584 S   0.0  0.7   0:00.15 /usr/sbin+
 54764 nobody    20   0  277928  17144   3336 S   0.0  0.7   0:00.08 /usr/sbin+
 54765 nobody    20   0  277784  17084   3316 S   0.0  0.7   0:00.08 /usr/sbin+
 54980 nobody    20   0  277784  17400   3492 S   0.0  0.7   0:00.10 /usr/sbin+
 55001 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 55016 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 55128 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.01 php-fpm: +
 55179 healtho+  20   0  459288  69472   4188 S   0.0  2.9   0:04.78 php-fpm: +
 55453 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 55503 healtho+  20   0  455192  65272   4184 S   0.0  2.7   0:01.16 php-fpm: +
 55575 nobody    20   0  277780  16972   3380 S   0.0  0.7   0:00.00 /usr/sbin+
 55606 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 55611 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 55612 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 55617 mailnull  20   0   89504   4496   1316 S   0.0  0.2   0:00.00 /usr/sbin+
 55618 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 55623 nobody    20   0  277400  16360   3172 S   0.0  0.7   0:00.00 /usr/sbin+
 55624 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 55625 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 55626 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 55627 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 55629 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55631 root      20   0  183080   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55632 root      20   0  183080   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55633 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55634 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55635 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55636 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55637 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 55638 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 55639 root      20   0  183080   2416   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 55640 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 55641 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 55642 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 55643 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 55672 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 55673 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 55674 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 55675 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 55676 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 55677 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 55678 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 55679 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 55680 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 55681 root      20   0   20164    968    768 R   0.0  0.0   0:00.00 jailshell+
 55682 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 55686 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 55688 saboakin  20   0   20164    256      0 R   0.0  0.0   0:00.00 jailshell+
 55689 robocal+  20   0       0      0      0 Z   0.0  0.0   0:00.00 [jailshel+
 55691 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 55699 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 55702 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 55705 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 76167 root      20   0  181776   7752   1104 S   0.0  0.3   0:05.38 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov12   0:20  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      20440  0.0  0.0      0     0 ?        D    00:57   0:00  \_ [kworker/u200:1]
root      55711  0.0  0.0      0     0 ?        R    01:33   0:00  |   \_ [kworker/u200:1]
root      25651  0.0  0.0      0     0 ?        R    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      31529  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:1]
root      39115  0.0  0.0      0     0 ?        S    01:16   0:00  \_ [kworker/1:2]
root      45600  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/0:2]
root      48337  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:2]
root      51051  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:0]
root      51088  0.0  0.0      0     0 ?        D    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44428  3404 ?        Ss   Nov12   0:27 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  6424 ?        Ss   Nov12   0:11 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ds   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   852 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    52 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3172 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   284 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1320 ?        Ssl  Nov12   0:16 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1416 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      55627  0.0  0.1 183080  2428 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55641  0.0  0.0 113284  1212 ?        Ss   01:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      55642  0.0  0.0 108052   356 ?        S    01:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      55643  0.0  0.0 113288  1516 ?        S    01:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      55709  0.0  0.0 153840  2096 ?        R    01:33   0:00  |               \_ ps auxf
root      55629  0.0  0.1 183080  2436 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55679  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      55631  0.0  0.1 183080  2432 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55680  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      55632  0.0  0.1 183080  2432 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55678  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      55633  0.0  0.1 183080  2428 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55677  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      55634  0.0  0.1 183080  2428 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55676  0.0  0.0  20164   968 ?        Ss   01:33   0:00  |   \_ jailshell (cloudsms) [55702] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  55702  0.0  0.0      0     0 ?        D    01:33   0:00  |       \_ [jailshell]
root      55635  0.0  0.1 183080  2428 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55675  0.0  0.0  20164   808 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      55636  0.0  0.1 183080  2428 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55674  0.0  0.0  20164   804 ?        Ss   01:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      55637  0.0  0.1 183080  2424 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55673  0.0  0.0  20164   968 ?        Ss   01:33   0:00  |   \_ jailshell (pactpay) [55691] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   55691  0.0  0.0  20164   260 ?        S    01:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   55695  0.0  0.6 476460 15964 ?        Rl   01:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      55639  0.0  0.0 183080  2416 ?        S    01:33   0:00  \_ /usr/sbin/CROND -n
root      55686  0.0  0.0  20164   968 ?        Ss   01:33   0:00      \_ jailshell (nigeria) [55699] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   55699  0.0  0.0  20164   260 ?        S    01:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   55701  0.0  0.6 400652 15932 ?        S    01:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3696 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  55617  0.0  0.1  89504  4496 ?        S    01:32   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13232 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  2316 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2688 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   284 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2196 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  48000  2400 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24396  2128 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   424 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1496 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34780 ?       SLsl Nov12   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      55001  0.0  0.1 111304  4272 ?        Ss   01:32   0:00  \_ sshd: [accepted]
sshd      55016  0.0  0.1 115644  2628 ?        S    01:32   0:00  |   \_ sshd: [net]
root      55453  0.0  0.1 111304  4272 ?        Ss   01:32   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   200 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.2 636988 29612 ?        Ssl  Nov12   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 273744  5988 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   380 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   544 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6008 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      55618  0.0  0.0      0     0 ?        Z    01:33   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   128 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 10.5 1828184 254380 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1876 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   55128  0.0  0.1 397064  4472 ?        S    01:32   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  55179 13.6  2.8 459288 69472 ?        S    01:32   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  55351 13.4  2.8 459288 69476 ?        R    01:32   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  55503 11.6  2.6 455192 65272 ?        S    01:32   0:01  \_ php-fpm: pool health_oyostate_gov_ng
cpanelc+   1006  0.0  0.1  10656  3708 ?        Ss   Nov12   0:16 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  3000 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.1 248152  3724 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  1.8 306476 45700 ?        S    Nov12   0:02  \_ spamd child
root       7886  0.0  0.1 248152  2552 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3216 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17824 ?        Ss   Nov12   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8248 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4272 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.8 262224 21048 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   452 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1360 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3  8.7 1457796 210932 ?      Sl   Nov12   4:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12848   376 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12888   384 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    45517  0.1  0.7 277928 18916 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    48281  0.1  0.8 278100 19380 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    49839  0.1  0.7 277720 18364 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50931  0.1  0.7 277720 17916 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody    50936  0.1  0.7 277808 17808 ?        S    01:27   0:00  \_ /usr/sbin/httpd -k start
nobody    51767  0.1  0.7 277792 17652 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    52820  0.1  0.7 277784 17968 ?        S    01:29   0:00  \_ /usr/sbin/httpd -k start
nobody    52868  0.1  0.7 277784 17492 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
cloudw    55698  0.0  0.6 352096 15232 ?        S    01:33   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    53884  0.1  0.7 277784 17540 ?        S    01:30   0:00  \_ /usr/sbin/httpd -k start
nobody    53901  0.1  0.7 277784 17580 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    53997  0.1  0.7 277560 17528 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    53999  0.1  0.7 277784 17684 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    54000  0.1  0.7 277828 17768 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    54754  0.1  0.7 277784 17300 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    54755  0.2  0.7 277812 17272 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    54762  0.2  0.7 277784 17388 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    54764  0.1  0.7 277928 17144 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    54765  0.1  0.7 277784 17084 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    54980  0.1  0.7 277784 17400 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    55575  0.0  0.7 277780 16972 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    55606  0.0  0.6 277640 15524 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    55611  0.0  0.6 277640 15524 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    55612  0.0  0.6 277640 15524 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    55623  0.0  0.6 277400 16360 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    55624  0.0  0.5 277092 13584 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    55625  0.0  0.5 277092 13584 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    55626  0.0  0.5 277092 13584 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 181776  7752 ?        Ss   00:00   0:05 lfd - sleeping
root      23911  0.0  0.4 1276100 10708 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 19803  Threads: 4  Questions: 1669880  Slow queries: 0  Opens: 6316  Flush tables: 1  Open tables: 2000  Queries per second avg: 84.324
*************************** 1. row ***************************
     Id: 23637
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 23639
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 23643
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 23647
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 142.44.233.63 TIME_WAIT
      1 170.23.19.154 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 84.37.234.246 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 162.62.132.25 TIME_WAIT
     81 167.172.65.25 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:33:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 29 minutes 58 seconds
   Server load: 1.45 1.43 1.14
   Total accesses: 105277 - Total Traffic: 2.8 GB - Total Duration: 52886616
   CPU Usage: u4.28 s3.36 cu1347.97 cs1081.53 - 12.3% CPU load
   5.32 requests/sec - 148.4 kB/second - 27.9 kB/request - 502.357 ms/request
   21 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

WKK_KKKKKKKKKK_W__KW..K..K.KK...._K............_................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  54980 0/18/4987  W 0.36 0   0   2478339 0.0   0.40  126.20 167.172.65.25  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-0  55575 1/2/5065   K 0.00 3   396 2332642 31.6  0.04  125.52 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2963771599 HTTP/1.1
   2-0  51767 1/85/4886  K 1.65 2   342 2545541 30.2  1.83  142.83 66.249.64.41   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1871155183 HTTP/1.1
   3-0  52820 0/65/4994  _ 1.29 0   288 2625989 0.0   1.38  145.51 167.172.65.25  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  54754 1/18/4781  K 0.33 2   388 2346130 30.9  0.38  124.70 66.249.64.46   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3868063563 HTTP/1.1
   5-0  54755 4/25/4934  K 0.51 3   351 2532776 123.6 0.59  155.41 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=925876718 HTTP/1.1
   6-0  53884 17/40/4662 K 0.99 4   349 2354006 513.4 1.04  125.39 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1378141503 HTTP/1.1
   7-0  54762 1/27/5458  K 0.56 0   357 2587064 30.9  0.63  145.78 66.249.70.8    http/1.1 schoolplus.cloudware.ng:80 GET /?p=944994794 HTTP/1.1
   8-0  55606 1/1/4148   K 0.00 2   426 2097905 31.4  0.03  107.63 66.249.70.37   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3824437670 HTTP/1.1
   9-0  55611 1/1/4358   K 0.00 1   356 2197383 30.4  0.03  115.80 192.178.4.103  http/1.1 schoolplus.cloudware.ng:80 GET /?p=374285800 HTTP/1.1
   10-0 53901 1/41/4466  K 0.85 3   341 2175439 30.9  0.92  124.42 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=434153536 HTTP/1.1
   11-0 55612 1/1/4777   K 0.00 1   403 2428471 31.6  0.03  154.28 66.249.64.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=522040482 HTTP/1.1
   12-0 54764 3/18/4364  K 0.30 4   283 2111489 92.3  0.36  109.33 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3452577061 HTTP/1.1
   13-0 54765 2/19/3560  K 0.25 4   289 1657437 62.3  0.32  84.22  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3589747691 HTTP/1.1
   14-0 55623 0/1/3769   _ 0.00 0   12  1944999 0.0   0.01  115.37 34.239.197.197 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/images/blog/blog/blog/201
   15-0 55624 0/0/3127   W 0.00 0   0   1578551 0.0   0.00  80.92  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 55625 0/0/4462   _ 0.00 0   0   2187351 0.0   0.00  119.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 55626 0/0/4980   _ 0.00 0   0   2559351 0.0   0.00  145.34 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 45517 3/200/2417 K 3.74 3   270 1316658 91.7  4.63  65.59  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3858806990 HTTP/1.1
   19-0 52868 0/56/3054  W 1.08 0   0   1629629 0.0   1.22  83.74  66.249.64.5    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2337103855 HTTP/1.1
   20-0 -     0/0/1807   . 0.00 46  0   938211  0.0   0.00  46.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1958   . 0.00 56  0   1025734 0.0   0.00  54.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 50931 1/73/1886  K 1.44 3   391 1011859 31.8  1.78  59.26  66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2928496739 HTTP/1.1
   23-0 -     0/0/1289   . 0.00 84  0   652860  0.0   0.00  30.25  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/2177   . 0.00 104 0   889199  0.0   0.00  47.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 53997 1/38/1209  K 0.84 1   254 637185  29.8  1.03  32.95  66.249.70.167  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3313589441 HTTP/1.1
   26-0 -     0/0/664    . 0.00 117 0   352645  0.0   0.00  17.25  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 53999 10/37/757  K 0.94 4   340 403331  314.2 1.04  20.59  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3976070269 HTTP/1.1
   28-0 54000 1/40/1700  K 0.75 2   370 777271  31.0  1.04  43.01  66.249.64.234  http/1.1 schoolplus.cloudware.ng:80 GET /?p=758825354 HTTP/1.1
   29-0 -     0/0/433    . 0.00 75  0   240323  0.0   0.00  11.39  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/810    . 0.00 105 0   420706  0.0   0.00  18.89  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/350    . 0.00 10  0   192517  0.0   0.00  9.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/241    . 0.00 206 0   126753  0.0   0.00  6.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 49839 0/113/398  _ 2.30 0   274 219276  0.0   2.83  10.26  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3107573457 HTTP/1.1
   34-0 50936 8/89/295   K 1.67 3   346 176044  247.9 1.79  7.56   66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4177758429 HTTP/1.1
   35-0 -     0/0/121    . 0.00 285 0   63609   0.0   0.00  3.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/33     . 0.00 294 0   16651   0.0   0.00  0.71   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/180    . 0.00 329 0   104001  0.0   0.00  4.72   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/21     . 0.00 317 0   11177   0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/61     . 0.00 268 0   29994   0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1120   . 0.00 420 0   651566  0.0   0.00  32.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/11     . 0.00 433 0   1258    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/13     . 0.00 426 0   4689    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 394 0   30775   0.0   0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 359 0   29051   0.0   0.00  1.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 422 0   2240    0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 438 0   2519    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 48281 0/153/153  _ 2.79 0   0   76075   0.0   3.94  3.94   ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   48-0 -     0/0/2      . 0.00 451 0   3773    0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 445 0   2208    0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 288 0   30413   0.0   0.00  3.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 446 0   3961    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 441 0   2145    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 356 0   17077   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 275 0   24170   0.0   0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 439 0   1791    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 428 0   2519    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 360 0   23864   0.0   0.00  0.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 348
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 1...119)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 29332
   total entries replaced since starting: 0
   total entries expired since starting: 28969
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 153 miss
   total removes since starting: 16 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit