403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.42.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.42 load[1] mem[77/70] mysql[4/8] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1767          89          16         505         417
Swap:          1999        1673         326
 01:42:02 up  5:39,  0 users,  load average: 1.73, 1.75, 1.41
## system overview
top - 01:42:02 up  5:39,  0 users,  load average: 1.73, 1.75, 1.41
Tasks: 204 total,   4 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 90.9 us,  9.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    88140 free,  1807500 used,   524660 buff/cache
KiB Swap:  2047996 total,   334672 free,  1713324 used.   430636 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 211620   3408 S 105.9  8.7   4:49.32 /usr/sbin+
 64414 healtho+  20   0  451096  61700   4244 R  47.1  2.5   0:01.11 php-fpm: +
 64649 nigeria   20   0  400652  15936  10216 S  11.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44428   3396   1484 R   0.0  0.1   0:28.68 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.42 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.97 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:21.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.91 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.92 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.19 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.44 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.97 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   8036   7796 S   0.0  0.3   0:11.79 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:01.87 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.62 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.45 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.74 /usr/lib/+
   503 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3020    760 S   0.0  0.1   0:00.28 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:10.46 /usr/bin/+
   519 nscd      20   0 1062080   1308    580 S   0.0  0.1   0:16.91 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.57 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3748    816 S   0.0  0.2   0:00.78 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13600   2612 S   0.0  0.6   0:04.98 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.42 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.30 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.81 /usr/bin/+
   933 telegraf  20   0 5654048  32800   2804 S   0.0  1.4   0:11.39 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.46 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.63 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    200    116 S   0.0  0.0   0:00.62 php-fpm: +
   961 named     20   0  636988  30360   1388 S   0.0  1.3   0:11.54 /usr/sbin+
   964 root      20   0  273744   7376   6928 S   0.0  0.3   0:05.49 /usr/sbin+
   981 root      20   0  436392    332    244 S   0.0  0.0   0:00.72 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.59 php-fpm: +
   985 root      20   0  261288   6204   1688 S   0.0  0.3   0:03.33 cpsrvd (S+
   989 root      20   0  392856    364    280 S   0.0  0.0   0:00.59 php-fpm: +
   992 root      20   0 1901916 242384    460 S   0.0 10.0   0:32.27 /usr/loca+
  1000 root      20   0  397344   1876    600 S   0.0  0.1   0:02.84 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 S   0.0  0.2   0:16.76 /usr/loca+
  1075 dovenull  20   0   47264   2280   1492 S   0.0  0.1   0:00.42 dovecot/p+
  1076 dovenull  20   0   48324   2784   1604 S   0.0  0.1   0:00.36 dovecot/i+
  1077 dovecot   20   0   10320    284    176 S   0.0  0.0   0:00.11 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.26 dovecot/l+
  1079 dovenull  20   0   47112   2160   1432 S   0.0  0.1   0:00.32 dovecot/p+
  1080 dovenull  20   0   48000   2572   1600 S   0.0  0.1   0:00.26 dovecot/i+
  1084 root      20   0   24528   2116    440 S   0.0  0.1   0:00.14 dovecot/c+
  1088 dovecot   20   0   13568    648    444 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1448    916 S   0.0  0.1   0:00.80 dovecot/a+
  1172 root      20   0  248152   6000   1240 S   0.0  0.2   0:05.27 /usr/loca+
  1173 wp-tool+  20   0  387556   3216   1348 S   0.0  0.1   0:00.23 /usr/bin/+
  1174 wp-tool+  20   0  410616  17824   1268 S   0.0  0.7   0:16.89 /usr/bin/+
  1232 root      20   0  209372   8176   1508 S   0.0  0.3   0:02.62 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.41 dnsadmin +
  1237 root      20   0  262224  20964   3036 S   0.0  0.9   0:01.13 cpdavd - +
  1642 root      20   0  299272    464    300 S   0.0  0.0   0:00.54 php-fpm: +
  1702 root      38  18  130416   1352    684 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.16 /usr/sbin+
  2063 root      20   0   12824    380    212 S   0.0  0.0   0:02.45 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.08 /usr/loca+
  2065 root      20   0   12856    392    216 S   0.0  0.0   0:02.30 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  94036   2404 S   0.0  3.9   0:03.25 spamd chi+
  7886 root      20   0  261428  93844   3116 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1416    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10708    560 S   0.0  0.4   0:00.07 /usr/bin/+
 23946 root      20   0 1277056  11532    560 S   0.0  0.5   0:00.06 /usr/bin/+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 39115 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.31 [kworker]
 48337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51986 root      20   0       0      0      0 R   0.0  0.0   0:00.06 [kworker/+
 56624 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 56661 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59610 nobody    20   0  277928  17668   3636 S   0.0  0.7   0:00.69 /usr/sbin+
 60622 nobody    20   0  277676  18260   3796 S   0.0  0.8   0:00.43 /usr/sbin+
 60627 nobody    20   0  277784  18360   3840 S   0.0  0.8   0:00.37 /usr/sbin+
 60628 nobody    20   0  277720  18648   4088 S   0.0  0.8   0:00.35 /usr/sbin+
 61380 nobody    20   0  277720  18144   3832 S   0.0  0.7   0:00.26 /usr/sbin+
 61403 nobody    20   0  277784  17768   3668 S   0.0  0.7   0:00.30 /usr/sbin+
 61476 nobody    20   0  277916  17932   3620 S   0.0  0.7   0:00.33 /usr/sbin+
 62196 nobody    20   0  277784  17976   3800 S   0.0  0.7   0:00.19 /usr/sbin+
 62404 nobody    20   0  277720  17816   3732 S   0.0  0.7   0:00.17 /usr/sbin+
 62413 nobody    20   0  277804  17464   3580 S   0.0  0.7   0:00.27 /usr/sbin+
 62440 nobody    20   0  277884  17836   3728 S   0.0  0.7   0:00.19 /usr/sbin+
 63359 nobody    20   0  277804  17400   3572 S   0.0  0.7   0:00.16 /usr/sbin+
 63371 nobody    20   0  277540  17340   3536 S   0.0  0.7   0:00.08 /usr/sbin+
 63373 nobody    20   0  277924  17572   3600 S   0.0  0.7   0:00.10 /usr/sbin+
 63710 nobody    20   0  277528  17292   3588 S   0.0  0.7   0:00.11 /usr/sbin+
 63711 nobody    20   0  277784  17088   3316 S   0.0  0.7   0:00.10 /usr/sbin+
 63731 nobody    20   0  277788  17640   3608 S   0.0  0.7   0:00.11 /usr/sbin+
 63733 nobody    20   0  277784  17820   3756 S   0.0  0.7   0:00.09 /usr/sbin+
 63734 nobody    20   0  277940  17508   3500 S   0.0  0.7   0:00.10 /usr/sbin+
 63753 nobody    20   0  277784  17400   3440 S   0.0  0.7   0:00.07 /usr/sbin+
 63755 nobody    20   0  277884  17624   3616 S   0.0  0.7   0:00.07 /usr/sbin+
 63757 nobody    20   0  277784  17648   3588 S   0.0  0.7   0:00.05 /usr/sbin+
 63767 healtho+  20   0  459424  70016   4244 S   0.0  2.9   0:06.02 php-fpm: +
 63768 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 64038 healtho+  20   0  459288  70024   4248 S   0.0  2.9   0:04.04 php-fpm: +
 64060 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 64062 healtho+  20   0  459288  69444   4212 S   0.0  2.9   0:03.68 php-fpm: +
 64216 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 64254 cloudw    20   0  570660 111096   6988 S   0.0  4.6   0:03.61 php-fpm: +
 64471 nobody    20   0  277792  15856   2192 S   0.0  0.7   0:00.01 /usr/sbin+
 64472 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 64475 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 64496 nobody    20   0  277520  16408   2876 S   0.0  0.7   0:00.01 /usr/sbin+
 64497 nobody    20   0  277660  16864   3304 S   0.0  0.7   0:00.00 /usr/sbin+
 64505 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 64506 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 64507 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 64508 nobody    20   0  277660  16864   3304 S   0.0  0.7   0:00.00 /usr/sbin+
 64550 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 64567 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 64573 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 64580 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 64585 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64593 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64597 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64599 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64601 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64602 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64605 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64607 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 64612 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 64615 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64620 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64622 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64623 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64626 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 64627 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 64637 nobody    20   0  277224  15140   2152 S   0.0  0.6   0:00.00 /usr/sbin+
 64638 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 64641 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 64642 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 64644 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 64646 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 64648 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 64702 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 76167 root      20   0  181876   7980   1104 S   0.0  0.3   0:05.84 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov12   0:21  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      39115  0.0  0.0      0     0 ?        S    01:16   0:00  \_ [kworker/1:2]
root      48337  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:2]
root      51088  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      56624  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/1:4]
root      56661  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/0:2]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44428  3396 ?        Ss   Nov12   0:28 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39500  8036 ?        Ss   Nov12   0:11 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    80 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3020 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1308 ?        Ssl  Nov12   0:16 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1416 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      64593  0.0  0.1 183080  2432 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      64626  0.0  0.0 113284  1212 ?        Ss   01:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      64641  0.0  0.0 108052   352 ?        S    01:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      64648  0.0  0.0 113288  1520 ?        S    01:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      64707  0.0  0.0 153840  2092 ?        R    01:42   0:00  |               \_ ps auxf
root      64597  0.0  0.1 183080  2432 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      64623  0.0  0.0  20164   804 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      64599  0.0  0.1 183080  2428 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      64622  0.0  0.0  20164   808 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      64601  0.0  0.1 183080  2428 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      64620  0.0  0.0  20164   804 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      64602  0.0  0.1 183080  2428 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      64615  0.0  0.0  20164   988 ?        Ss   01:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      64708  0.0  0.0      0     0 ?        Z    01:42   0:00  |       \_ [setupvirtfs] <defunct>
root      64605  0.0  0.1 183080  2424 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      64627  0.0  0.0  20164   968 ?        Ss   01:42   0:00  |   \_ jailshell (pactpay) [64642] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   64642  0.0  0.0  20164   260 ?        S    01:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   64646  1.0  0.7 476724 17484 ?        S    01:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      64607  0.0  0.1 183080  2428 ?        S    01:42   0:00  \_ /usr/sbin/CROND -n
root      64612  0.0  0.0  20164   972 ?        Ss   01:42   0:00      \_ jailshell (nigeria) [64644] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64644  0.0  0.0  20164   264 ?        S    01:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64649  5.0  0.6 400652 15936 ?        S    01:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3748 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13600 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  2280 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2784 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   284 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2160 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2572 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  2116 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   648 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1448 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 32800 ?       SLsl Nov12   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      63768  0.0  0.1 111304  4272 ?        Ss   01:41   0:00  \_ sshd: [accepted]
root      64060  0.0  0.1 111304  4272 ?        Ss   01:41   0:00  \_ sshd: [accepted]
root      64216  0.0  0.1 111304  4272 ?        Ss   01:41   0:00  \_ sshd: [accepted]
root      64567  0.0  0.1 111304  4272 ?        Ss   01:41   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   200 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.2 636988 30360 ?        Ssl  Nov12   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.3 273744  7376 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6204 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      64585  0.0  0.0      0     0 ?        Z    01:42   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   364 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 10.0 1901916 242384 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1876 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  63767 10.9  2.8 459424 70016 ?        S    01:41   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  64038 10.9  2.8 459288 70024 ?        S    01:41   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  64062 10.5  2.8 459288 69444 ?        S    01:41   0:03  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    64254 15.6  4.5 570660 111096 ?       S    01:41   0:03  \_ php-fpm: pool cloudware_ng
healtho+  64414  9.3  2.5 451096 61700 ?        R    01:41   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   64573  0.0  0.1 397064  4472 ?        S    01:41   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3696 ?        Ss   Nov12   0:16 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  6000 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  3.8 306476 94036 ?        S    Nov12   0:03  \_ spamd child
root       7886  0.0  3.8 261428 93844 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3216 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17824 ?        Ss   Nov12   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8176 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.8 262224 20964 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   464 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1352 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.7 1457796 211620 ?      Sl   Nov12   4:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12824   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12856   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    59610  0.2  0.7 277928 17668 ?        S    01:37   0:00  \_ /usr/sbin/httpd -k start
nobody    60622  0.1  0.7 277676 18260 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    60627  0.1  0.7 277784 18360 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    60628  0.1  0.7 277720 18648 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    61380  0.1  0.7 277720 18144 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    61403  0.1  0.7 277784 17768 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    61476  0.1  0.7 277916 17932 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    62196  0.1  0.7 277784 17976 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    62404  0.1  0.7 277720 17816 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    62413  0.2  0.7 277804 17464 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    62440  0.1  0.7 277884 17836 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody    63359  0.1  0.7 277804 17400 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    63371  0.1  0.7 277540 17340 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    63373  0.1  0.7 277924 17572 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    63710  0.1  0.7 277528 17292 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    63711  0.1  0.7 277784 17088 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    63731  0.1  0.7 277788 17640 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    63733  0.1  0.7 277784 17820 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    63734  0.1  0.7 277940 17508 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    63753  0.1  0.7 277784 17400 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    63755  0.1  0.7 277884 17624 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    63757  0.0  0.7 277784 17648 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64471  0.1  0.6 277792 15856 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64496  0.1  0.6 277520 16408 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64497  0.0  0.6 277660 16864 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64505  0.0  0.6 277640 15520 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64506  0.0  0.6 277640 15520 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64507  0.0  0.6 277640 15520 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64508  0.0  0.6 277660 16864 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64550  0.0  0.6 277640 15520 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64580  0.0  0.6 277640 15520 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64637  0.0  0.6 277224 15140 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody    64638  0.0  0.6 277640 15520 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 181876  7980 ?        Ss   00:00   0:05 lfd - sleeping
root      23911  0.0  0.4 1276100 10708 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 20343  Threads: 4  Questions: 1761057  Slow queries: 0  Opens: 6419  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.568
*************************** 1. row ***************************
     Id: 24918
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 24925
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 24927
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 185.11.166.192 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.65.195.113 TIME_WAIT
      1 37.114.50.124 TIME_WAIT
      1 45.84.107.222 TIME_WAIT
      1 47.128.62.219 TIME_WAIT
      1 54.39.89.58 TIME_WAIT
      1 57.141.0.70 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 69.171.231.27 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.252.69.116 TIME_WAIT
      3 185.117.225.158 TIME_WAIT
      6 27.199.66.158 TIME_WAIT
     67 167.172.65.25 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:42:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 38 minutes 58 seconds
   Server load: 1.73 1.75 1.41
   Total accesses: 109485 - Total Traffic: 2.9 GB - Total Duration: 55418095
   CPU Usage: u3.56 s3.2 cu1399.1 cs1123.02 - 12.4% CPU load
   5.38 requests/sec - 149.4 kB/second - 27.8 kB/request - 506.171 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

_K_KKKKKKKWK_K_KWKK_KKWK_KKKK.K_K.....K.........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                 Request
   0-0  62196 0/39/5124  _ 0.70 0   775 2563557 0.0   0.79  129.45 27.199.66.158 http/1.1 cloudware.ng:443           GET / HTTP/1.1
   1-0  64471 1/3/5201   K 0.02 1   420 2417441 32.9  0.06  129.13 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4244278904 HTTP/1.1
   2-0  64496 0/2/5004   _ 0.01 0   306 2607984 0.0   0.06  145.46 66.249.64.110 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1438992512 HTTP/1.1
   3-0  63359 1/30/5147  K 0.63 1   416 2718753 31.8  0.73  149.19 66.249.64.227 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2374597530 HTTP/1.1
   4-0  63710 2/21/4886  K 0.47 3   405 2408052 59.6  0.49  127.12 66.249.64.230 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3210900910 HTTP/1.1
   5-0  63371 1/22/5085  K 0.23 2   410 2623327 30.8  0.32  158.62 66.249.70.134 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1793122074 HTTP/1.1
   6-0  63711 1/16/4762  K 0.41 4   325 2415698 31.2  0.46  127.64 66.249.64.46  http/1.1 schoolplus.cloudware.ng:80 GET /?p=677611713 HTTP/1.1
   7-0  61380 1/51/5588  K 1.02 0   418 2665123 32.2  1.10  148.84 66.249.64.173 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3918100323 HTTP/1.1
   8-0  63731 1/21/4279  K 0.47 0   381 2174161 34.0  0.51  110.28 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=1360876627 HTTP/1.1
   9-0  62404 1/30/4512  K 0.67 2   518 2288645 229.6 1.11  119.87 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /var/cache/prod/pools/2wJoJAFabM/D/T/ HTTP/1.1
   10-0 64497 0/2/4590   W 0.00 0   0   2253928 0.0   0.04  127.49 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 61403 1/55/4895  K 1.25 1   341 2505618 31.1  1.37  156.76 66.249.64.72  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3290070694 HTTP/1.1
   12-0 64505 0/1/4514   _ 0.00 0   315 2203997 0.0   0.03  113.08 66.249.70.160 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1974660641 HTTP/1.1
   13-0 63733 2/19/3727  K 0.30 3   301 1760831 62.5  0.40  88.09  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1312728429 HTTP/1.1
   14-0 62413 0/47/3895  _ 1.23 0   594 2022542 0.0   1.29  118.50 167.172.65.25 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   15-0 63373 1/20/3261  K 0.42 4   403 1653643 31.3  0.48  84.19  66.249.70.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1016746906 HTTP/1.1
   16-0 64506 0/1/4593   W 0.00 0   0   2266188 0.0   0.03  122.84 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4016479778 HTTP/1.1
   17-0 63734 1/18/5130  K 0.38 2   417 2650236 31.5  0.41  148.81 66.249.70.174 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2555242837 HTTP/1.1
   18-0 59610 1/122/2581 K 3.07 3   279 1423688 29.3  3.27  69.84  66.249.70.167 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2857456606 HTTP/1.1
   19-0 64507 0/1/3141   _ 0.00 0   311 1676076 0.0   0.03  85.35  66.249.70.109 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3380766430 HTTP/1.1
   20-0 64508 1/2/1910   K 0.00 4   418 1000134 31.8  0.04  48.59  66.249.64.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1021860133 HTTP/1.1
   21-0 64550 1/1/2076   K 0.00 3   354 1097619 30.4  0.03  57.16  66.249.64.75  http/1.1 schoolplus.cloudware.ng:80 GET /?p=287953533 HTTP/1.1
   22-0 63753 0/15/2003  W 0.19 0   0   1080968 0.0   0.26  61.71  167.172.65.25 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   23-0 64580 1/1/1423   K 0.00 1   345 736816  30.6  0.03  33.88  66.249.70.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1960559094 HTTP/1.1
   24-0 64637 0/1/2204   _ 0.00 0   2   901817  0.0   0.02  48.11  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   25-0 60622 1/85/1354  K 1.76 0   405 721997  29.9  2.20  36.56  66.249.70.7   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2725333771 HTTP/1.1
   26-0 63755 1/16/717   K 0.22 1   360 383048  30.9  0.36  18.38  66.249.70.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1301842708 HTTP/1.1
   27-0 64638 1/1/836    K 0.00 0   304 445246  30.3  0.03  22.15  66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2188609791 HTTP/1.1
   28-0 63757 1/14/1753  K 0.16 2   435 806425  30.2  0.22  43.92  66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=222719000 HTTP/1.1
   29-0 -     0/0/481    . 0.00 53  0   269727  0.0   0.00  12.35  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 61476 1/65/915   K 1.40 0   449 485957  30.3  1.72  21.50  66.249.70.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3032530595 HTTP/1.1
   31-0 60627 0/71/424   _ 1.52 0   263 238601  0.0   1.66  10.72  192.178.4.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1607848726 HTTP/1.1
   32-0 60628 1/70/313   K 1.41 2   410 172301  31.2  2.26  8.30   66.249.70.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1268120750 HTTP/1.1
   33-0 -     0/0/464    . 0.00 25  0   261053  0.0   0.00  11.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/391    . 0.00 44  0   235836  0.0   0.00  9.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/130    . 0.00 105 0   67574   0.0   0.00  3.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/39     . 0.00 106 0   18508   0.0   0.00  0.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/220    . 0.00 104 0   129325  0.0   0.00  5.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 62440 1/39/89    K 0.74 4   356 53604   30.5  0.87  2.14   66.249.70.2   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3941479182 HTTP/1.1
   39-0 -     0/0/71     . 0.00 101 0   33332   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1120   . 0.00 960 0   651566  0.0   0.00  32.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/11     . 0.00 973 0   1258    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/13     . 0.00 966 0   4689    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 934 0   30775   0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 899 0   29051   0.0   0.00  1.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 962 0   2240    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 978 0   2519    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 171 0   144675  0.0   0.00  6.70   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 991 0   3773    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 985 0   2208    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 828 0   30413   0.0   0.00  3.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 986 0   3961    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 981 0   2145    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 896 0   17077   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 815 0   24170   0.0   0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 979 0   1791    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 968 0   2519    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 900 0   23864   0.0   0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 406
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 15 seconds, (range: 1...63)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 30029
   total entries replaced since starting: 0
   total entries expired since starting: 29607
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 163 miss
   total removes since starting: 16 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit