403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.02.18.txt
 ## swap threshold exceeded
## server overview
2025-11-16.02.18 load[1] mem[49/79] mysql[3/10] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1099         147         101        1116         994
Swap:          1999        1689         310
 02:18:01 up 11:53,  0 users,  load average: 1.32, 0.77, 0.56
## system overview
top - 02:18:01 up 11:53,  0 users,  load average: 1.32, 0.77, 0.56
Tasks: 198 total,   4 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 66.7 us, 27.3 sy,  0.0 ni,  6.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   150236 free,  1126524 used,  1143540 buff/cache
KiB Swap:  2047996 total,   318460 free,  1729536 used.  1018160 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 266548   4084 S  87.5 11.0  10:09.78 /usr/sbin+
 26659 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.06 /opt/cpan+
 26604 healtho+  20   0  406888  12288   3300 R  12.5  0.5   0:00.02 php-fpm: +
     1 root      20   0   44412   3504   1640 S   0.0  0.1   0:58.77 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.57 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.02 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:43.05 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.89 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.48 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.24 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.75 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.16 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.76 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [kworker/+
   358 root      20   0   40244   2720   2468 S   0.0  0.1   0:21.22 /usr/lib/+
   385 root      20   0   45444    396    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    536    408 S   0.0  0.0   0:03.15 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.96 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1332    956 S   0.0  0.1   0:09.89 /usr/lib/+
   523 nscd      20   0 1264844   1960    920 S   0.0  0.1   0:34.40 /usr/sbin+
   524 root      20   0   52852    508    396 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1188    796 S   0.0  0.0   0:05.81 /usr/lib/+
   529 root      20   0  224148   3900    984 S   0.0  0.2   0:00.48 queueproc+
   531 dbus      20   0   58740   1536    788 S   0.0  0.1   0:22.49 /usr/bin/+
   539 rpc       20   0   69256    132     72 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.21 /usr/sbin+
   577 root      20   0   24208     92     64 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4012   1076 S   0.0  0.2   0:00.80 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.64 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:04.38 /usr/sbin+
   919 root      20   0 1350088   7580    200 S   0.0  0.3   0:20.11 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  36044   6000 S   0.0  1.5   0:23.36 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.94 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.89 pure-ftpd+
   926 root      20   0  572372   1076    500 S   0.0  0.0   0:03.70 /usr/bin/+
   927 systuser  20   0  114016  15568   2528 S   0.0  0.6   0:10.11 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.50 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   6304    220 S   0.0  0.3   0:24.32 /usr/bin/+
   946 root      20   0  396248    816    632 S   0.0  0.0   0:01.07 php-fpm: +
   954 named     20   0 1185864  43640   2492 S   0.0  1.8   0:21.79 /usr/sbin+
   957 root      20   0  331088   4120   2808 S   0.0  0.2   0:10.91 /usr/sbin+
   973 root      20   0  400740   3000    888 S   0.0  0.1   0:06.62 php-fpm: +
   975 root      20   0  439788   1784   1576 S   0.0  0.1   0:01.26 php-fpm: +
   978 cpanelc+  20   0   10456   3696   2432 S   0.0  0.2   0:34.08 /usr/loca+
   980 root      20   0  388892    916    700 S   0.0  0.0   0:01.29 php-fpm: +
   991 root      20   0  389508    684    592 S   0.0  0.0   0:01.17 php-fpm: +
   992 root      20   0 1763124  75812    952 S   0.0  3.1   0:14.21 /usr/loca+
   993 root      20   0  261288   7052   1940 S   0.0  0.3   0:08.64 cpsrvd (S+
  1065 dovenull  20   0   47524   2936   1648 S   0.0  0.1   0:00.78 dovecot/p+
  1066 dovenull  20   0   47948   3412   1924 S   0.0  0.1   0:00.43 dovecot/i+
  1067 dovecot   20   0   10320    548    432 S   0.0  0.0   0:00.13 dovecot/a+
  1068 root      20   0   10452    632    436 S   0.0  0.0   0:00.48 dovecot/l+
  1069 dovenull  20   0   47600   3044   1648 S   0.0  0.1   0:00.63 dovecot/p+
  1070 dovenull  20   0   47848   3384   1960 S   0.0  0.1   0:00.39 dovecot/i+
  1077 root      20   0   24528   2688    632 S   0.0  0.1   0:00.26 dovecot/c+
  1078 dovecot   20   0   13568    804    572 S   0.0  0.0   0:00.10 dovecot/s+
  1150 root      20   0  248140  23500   1104 S   0.0  1.0   0:07.92 /usr/loca+
  1151 systuser  20   0  157704   2988    952 S   0.0  0.1   0:00.20 SonarPush+
  1152 dovecot   20   0   41180   1636   1132 S   0.0  0.1   0:01.00 dovecot/a+
  1153 wp-tool+  20   0  387556   5324   1996 S   0.0  0.2   0:00.39 /usr/bin/+
  1154 wp-tool+  20   0  410480  31080   2060 S   0.0  1.3   0:36.14 /usr/bin/+
  1229 root      20   0  183900   6696   3460 S   0.0  0.3   0:02.48 cpdavd - +
  1231 root      20   0  210052  11292   2536 S   0.0  0.5   0:05.48 tailwatchd
  1232 root      20   0  167452   3400   2024 S   0.0  0.1   0:00.69 dnsadmin +
  1638 root      20   0  299272    880    500 S   0.0  0.0   0:01.15 php-fpm: +
  1681 root      38  18  130416   1488    808 S   0.0  0.1   0:00.10 cpanellog+
  1909 root      20   0  266984   8220    804 S   0.0  0.3   0:04.21 /usr/sbin+
  1911 root      20   0   12808    476    364 S   0.0  0.0   0:04.88 /usr/loca+
  1912 root      20   0   12732    432    356 S   0.0  0.0   0:04.27 /usr/loca+
  1913 root      20   0   12820    484    360 S   0.0  0.0   0:04.68 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  268280 100672   2804 S   0.0  4.2   0:05.52 spamd chi+
  8199 root      20   0  249268  44376    696 S   0.0  1.8   0:00.06 spamd chi+
  9043 nobody    20   0  277656  20972   5040 S   0.0  0.9   0:01.87 /usr/sbin+
  9220 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 10819 nobody    20   0  277656  20600   4876 S   0.0  0.9   0:01.88 /usr/sbin+
 14089 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16971 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 17789 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18633 nobody    20   0  277680  20072   4620 S   0.0  0.8   0:00.93 /usr/sbin+
 18635 nobody    20   0  277876  20288   4604 S   0.0  0.8   0:01.03 /usr/sbin+
 18636 nobody    20   0  277680  20020   4600 S   0.0  0.8   0:01.08 /usr/sbin+
 21304 nobody    20   0  277768  19704   4348 S   0.0  0.8   0:00.70 /usr/sbin+
 21736 nobody    20   0  277688  19824   4456 S   0.0  0.8   0:00.67 /usr/sbin+
 22615 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23463 nobody    20   0  277872  19468   4204 S   0.0  0.8   0:00.35 /usr/sbin+
 23474 nobody    20   0  277552  19152   4092 S   0.0  0.8   0:00.43 /usr/sbin+
 25022 nobody    20   0  277844  19252   4100 S   0.0  0.8   0:00.25 /usr/sbin+
 25106 nobody    20   0  277752  19368   4064 S   0.0  0.8   0:00.27 /usr/sbin+
 25649 nobody    20   0  277824  19396   4040 S   0.0  0.8   0:00.09 /usr/sbin+
 25678 nobody    20   0  277540  19176   4096 S   0.0  0.8   0:00.14 /usr/sbin+
 25895 nobody    20   0  277740  18820   3612 S   0.0  0.8   0:00.07 /usr/sbin+
 25900 nobody    20   0  277748  19012   3760 S   0.0  0.8   0:00.15 /usr/sbin+
 25901 nobody    20   0  277744  19304   4036 S   0.0  0.8   0:00.08 /usr/sbin+
 26158 nobody    20   0  277748  19000   3784 S   0.0  0.8   0:00.06 /usr/sbin+
 26186 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 26197 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 26487 nigeria   20   0  400460   5304   2344 S   0.0  0.2   0:00.00 php-fpm: +
 26530 nobody    20   0  277608  18212   3256 S   0.0  0.8   0:00.00 /usr/sbin+
 26575 nobody    20   0  277744  18276   3160 S   0.0  0.8   0:00.01 /usr/sbin+
 26593 salutem   20   0  405256  16416   3792 S   0.0  0.7   0:00.08 php-fpm: +
 26600 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 26601 healtho+  20   0  430824  38556   4044 S   0.0  1.6   0:00.29 php-fpm: +
 26608 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 26609 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26610 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26611 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 26612 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26613 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 26615 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 26616 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26617 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26619 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26620 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26622 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26630 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26631 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26633 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26634 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26635 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26636 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 26638 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 26640 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26641 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 26642 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 26643 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 26644 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26647 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 26651 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 26652 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26657 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26663 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 26671 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26690 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 26692 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 26700 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 26702 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 26703 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 31033 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.77 [kworker]
 48777 root      20   0  181812  29432   1828 S   0.0  1.2   0:09.08 lfd - sle+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kworker/+
 81352 root      20   0  183052   1652   1084 S   0.0  0.1   0:00.00 /usr/sbin+
 81404 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056    292    216 S   0.0  0.0   0:00.00 sleep 3h +
 89675 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 89760 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov15   0:43  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      56928  0.0  0.0      0     0 ?        D    00:15   0:00  \_ [kworker/u200:1]
root      26705  0.0  0.0      0     0 ?        R    02:18   0:00  |   \_ [kworker/u200:1]
root      89675  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:2]
root      89760  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/1:2]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root       9220  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:5]
root      14089  0.0  0.0      0     0 ?        D    02:00   0:00  \_ [kworker/0:3]
root      16971  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/1:0]
root      17789  0.0  0.0      0     0 ?        S    02:05   0:00  \_ [kworker/0:0]
root      22615  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:4]
root      26671  0.0  0.0      0     0 ?        D    02:18   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44412  3504 ?        Ss   Nov15   0:58 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  2720 ?        Ss   Nov15   0:21 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   396 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   536 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1332 ?        Ss   Nov15   0:09 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1960 ?        Ssl  Nov15   0:34 /usr/sbin/nscd
root        524  0.0  0.0  52852   508 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1188 ?        Ssl  Nov15   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.1 224148  3900 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1536 ?        Ss   Nov15   0:22 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   132 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052  1652 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056   292 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root      26608  0.0  0.0 183048  2152 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26643  0.0  0.0 113284  1208 ?        Ss   02:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      26647  0.0  0.0 108052   356 ?        S    02:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      26651  0.0  0.0 113288  1512 ?        S    02:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      26704  0.0  0.0 153840  2096 ?        R    02:18   0:00  |               \_ ps auxf
root      26609  0.0  0.0 183048  2156 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26633  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      26611  0.0  0.0 183048  2152 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26631  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      26612  0.0  0.0 183048  2156 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26636  0.0  0.0  20164   988 ?        Ss   02:18   0:00  |   \_ jailshell (cloudsms) [26700] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  26700  0.0  0.0  20164   264 ?        S    02:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  26702  0.0  0.0 113284  1212 ?        S    02:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  26703  0.0  0.0 113284   184 ?        R    02:18   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      26613  0.0  0.0 183048  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26630  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      26615  0.0  0.0 183048  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26635  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      26616  0.0  0.0 183048  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26644  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      26617  0.0  0.0 183048  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26634  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      26619  0.0  0.0 183048  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26640  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      26620  0.0  0.0 183048  2152 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26641  0.0  0.0  20164   964 ?        Ss   02:18   0:00  |   \_ jailshell (pactpay) [26652] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26652  0.0  0.0  20164   260 ?        S    02:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26663  0.0  0.7 480124 17684 ?        S    02:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      26622  0.0  0.0 183048  2148 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root      26642  0.0  0.0  20164   964 ?        Ss   02:18   0:00      \_ jailshell (nigeria) [26657] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26657  0.0  0.0  20164   260 ?        S    02:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26659  0.0  0.6 404052 16140 ?        S    02:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    92 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4012 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root      26186  0.0  0.1 111304  4260 ?        Ss   02:17   0:00  \_ sshd: [accepted]
sshd      26197  0.0  0.1 115644  2628 ?        S    02:17   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 7580 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 36044 ?       SLsl Nov15   0:23 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1076 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15568 ?        Ssl  Nov15   0:10 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  2936 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3412 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   548 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3044 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47848  3384 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2688 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   804 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1636 ?        S    Nov15   0:01  \_ dovecot/auth
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 6304 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   816 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
salutem   26593  2.6  0.6 405256 16416 ?        S    02:17   0:00  \_ php-fpm: pool salutem_com_ng
named       954  0.0  1.8 1185864 43640 ?       Ssl  Nov15   0:21 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.1 331088  4120 ?        Ssl  Nov15   0:10 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3000 ?        Ss   Nov15   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   26487  0.0  0.2 400460  5304 ?        S    02:17   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  26601 14.5  1.5 430824 38556 ?        S    02:17   0:00  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  26604  3.0  0.6 410984 16248 ?        R    02:17   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        975  0.0  0.0 439788  1784 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3696 ?        Ss   Nov15   0:34 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   916 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   684 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.1 1763124 75812 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7052 ?        Ss   Nov15   0:08 cpsrvd (SSL) - waiting for connections                   
root      26600  0.0  0.0      0     0 ?        Z    02:17   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.9 248140 23500 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  4.1 268280 100672 ?       S    Nov15   0:05  \_ spamd child
root       8199  0.0  1.8 249268 44376 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2988 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5324 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 31080 ?        Ss   Nov15   0:36 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  6696 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.4 210052 11292 ?        Ss   Nov15   0:05 tailwatchd
root       1232  0.0  0.1 167452  3400 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   880 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1488 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.0 1458332 266548 ?      Sl   Nov15  10:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8220 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12808   476 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   432 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12820   484 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9043  0.1  0.8 277656 20972 ?        S    01:52   0:01  \_ /usr/sbin/httpd -k start
nobody    10819  0.1  0.8 277656 20600 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
nobody    18633  0.1  0.8 277680 20072 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    18635  0.1  0.8 277876 20288 ?        S    02:06   0:01  \_ /usr/sbin/httpd -k start
nobody    18636  0.1  0.8 277680 20020 ?        S    02:06   0:01  \_ /usr/sbin/httpd -k start
nobody    21304  0.1  0.8 277768 19704 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    21736  0.1  0.8 277688 19824 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    23463  0.1  0.8 277872 19468 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    23474  0.1  0.7 277552 19152 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    26706  0.0  0.6 277552 15060 ?        R    02:18   0:00  |   \_ /usr/sbin/httpd -k start
nobody    25022  0.1  0.7 277844 19252 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    25106  0.1  0.8 277752 19368 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    25649  0.0  0.8 277824 19396 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    25678  0.1  0.7 277540 19176 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    25895  0.0  0.7 277740 18820 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    25900  0.2  0.7 277748 19012 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    25901  0.1  0.7 277744 19304 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    26158  0.1  0.7 277748 19000 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody    26530  0.0  0.7 277608 18212 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody    26575  0.1  0.7 277744 18276 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148     8 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152    36 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181812 29432 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 42815  Threads: 5  Questions: 3870402  Slow queries: 0  Opens: 12163  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.398
*************************** 1. row ***************************
     Id: 54337
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 54341
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 54348
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 54351
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.248.90.230 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 178.128.60.47 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 94.102.49.155 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 80.82.77.202 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 02:18:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 53 minutes 31 seconds
   Server load: 1.32 0.77 0.56
   Total accesses: 225021 - Total Traffic: 4.7 GB - Total Duration: 115404624
   CPU Usage: u7.18 s7.09 cu2705.6 cs2303.5 - 11.7% CPU load
   5.26 requests/sec - 114.2 kB/second - 21.7 kB/request - 512.862 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

__K____KR._W_KWKW...K.K_........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  25649 0/28/11200  _ 0.27 2     201 5455327 0.0   0.52  225.53 142.44.233.133 http/1.1 salutem.com.ng:80          GET /patient/forgot_password HTTP/1.1
   1-0  21736 0/123/11361 _ 2.92 1     4   5718766 0.0   3.33  231.65 66.249.64.98   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Plateau&lga=Jos%20south HT
   2-0  25678 6/29/10747  K 0.58 0     364 5416154 189.8 0.89  225.95 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=2811894331 HTTP/1.1
   3-0  25895 0/17/11138  _ 0.24 3     353 5289237 0.0   0.28  222.94 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=1369202057 HTTP/1.1
   4-0  9043  0/416/11941 _ 9.66 0     23  6217992 0.0   6.70  230.11 66.249.70.7    http/1.1 test.cloudware.ng:443      GET /1569096365?goodscode=1567040646 HTTP/1.1
   5-0  25900 0/26/10422  _ 0.63 0     9   5298841 0.0   0.62  218.88 50.16.72.185   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/assets/css/polling_u
   6-0  25901 0/21/10967  _ 0.20 2     1   5363569 0.0   0.25  225.73 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   7-0  21304 1/112/10003 K 2.91 1     312 4991360 35.4  3.24  207.36 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=335481063 HTTP/1.1
   8-0  26158 0/14/9733   R 0.19 3     268 4935508 0.0   0.25  205.20 43.200.8.68    http/1.1 payments.cloudware.ng:443
   9-0  -     0/0/9665    . 0.00 1     0   4754600 0.0   0.00  225.64 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 23463 0/64/9935   _ 1.43 2     1   4832786 0.0   1.39  216.94 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   11-0 10819 72/405/9212 W 8.25 0     0   4814795 323.7 10.84 210.11 178.128.60.47  http/1.1 health.oyostate.gov.ng:443 GET /wp-login.php HTTP/1.1
   12-0 25022 0/44/8769   _ 1.05 0     0   5005975 0.0   1.05  188.52 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 25106 5/68/9239   K 1.48 0     299 4744392 156.9 0.75  197.74 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=186937503 HTTP/1.1
   14-0 26530 0/2/8219    W 0.00 0     0   4067701 0.0   0.04  174.85 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 26575 2/2/8169    K 0.02 3     262 4355489 64.7  0.06  177.49 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=3306485019 HTTP/1.1
   16-0 23474 0/81/7236   W 2.04 0     0   3757051 0.0   1.97  160.20 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=1778756979 HTTP/1.1
   17-0 -     0/0/7048    . 0.00 693   0   3404690 0.0   0.00  142.40 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/6357    . 0.00 285   0   3456882 0.0   0.00  148.22 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/6874    . 0.00 434   1   3355071 0.0   0.00  137.32 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 18633 2/177/4287  K 4.20 1     269 2383302 65.3  4.17  98.15  192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=2017237058 HTTP/1.1
   21-0 -     0/0/4401    . 0.00 688   0   2328977 0.0   0.00  96.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 18635 1/190/4280  K 4.68 2     334 2431155 207.0 4.54  104.03 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /vendor/gedmo/doctrine-extensions/lib/Gedmo/Translator/Enti
   23-0 18636 0/264/4436  _ 4.20 0     261 2478796 0.0   4.87  102.63 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=1463121291 HTTP/1.1
   24-0 -     0/0/2508    . 0.00 1841  0   1547389 0.0   0.00  60.62  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1318    . 0.00 1847  0   711217  0.0   0.00  29.87  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1179    . 0.00 1781  0   637639  0.0   0.00  26.96  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/742     . 0.00 1762  0   405485  0.0   0.00  15.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/955     . 0.00 611   0   443622  0.0   0.00  17.54  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/520     . 0.00 1801  0   302163  0.0   0.00  11.61  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1231    . 0.00 1805  0   717523  0.0   0.00  28.66  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/629     . 0.00 1472  0   242270  0.0   0.00  9.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/391     . 0.00 1850  0   182151  0.0   0.00  5.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/210     . 0.00 1758  0   116315  0.0   0.00  3.75   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/774     . 0.00 1849  0   421442  0.0   0.00  13.47  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/252     . 0.00 1845  0   157070  0.0   0.00  3.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/239     . 0.00 1840  0   198534  0.0   0.00  5.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/265     . 0.00 1796  0   115347  0.0   0.00  3.19   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/85      . 0.00 1846  0   41529   0.0   0.00  0.97   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/676     . 0.00 1671  0   322135  0.0   0.00  13.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/141     . 0.00 1829  0   132784  0.0   0.00  2.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/186     . 0.00 1842  0   83172   0.0   0.00  2.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/164     . 0.00 1802  0   99284   0.0   0.00  10.52  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/139     . 0.00 1848  0   75921   0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/94      . 0.00 1839  0   28630   0.0   0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/530     . 0.00 1045  0   267266  0.0   0.00  12.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/27      . 0.00 2272  0   35819   0.0   0.00  0.27   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/155     . 0.00 2230  0   39300   0.0   0.00  1.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/200     . 0.00 2251  0   42286   0.0   0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/84      . 0.00 2105  0   75619   0.0   0.00  3.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/447     . 0.00 2264  0   253172  0.0   0.00  9.86   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/40      . 0.00 2246  0   12768   0.0   0.00  0.60   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/29      . 0.00 2284  0   8951    0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/125     . 0.00 2244  0   81098   0.0   0.00  2.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/286     . 0.00 2238  0   153536  0.0   0.00  5.93   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/422     . 0.00 2220  0   320901  0.0   0.00  13.81  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/79      . 0.00 2268  0   50774   0.0   0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/30      . 0.00 2269  0   8201    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/345     . 0.00 2104  0   224672  0.0   0.00  7.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/211     . 0.00 2108  0   85306   0.0   0.00  3.87   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/257     . 0.00 1852  0   154505  0.0   0.00  5.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/210     . 0.00 2123  0   75311   0.0   0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/225     . 0.00 2263  0   116672  0.0   0.00  4.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/53      . 0.00 2110  0   41973   0.0   0.00  0.90   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/234     . 0.00 2231  0   61300   0.0   0.00  1.81   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/104     . 0.00 2111  0   43929   0.0   0.00  1.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/54      . 0.00 2229  0   37444   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/137     . 0.00 1830  0   63130   0.0   0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/21      . 0.00 2260  0   40095   0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/201     . 0.00 2239  0   93119   0.0   0.00  3.98   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/66      . 0.00 2248  0   66683   0.0   0.00  1.28   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/931     . 0.00 2222  0   498006  0.0   0.00  20.96  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/182     . 0.00 2099  0   69161   0.0   0.00  2.55   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/263     . 0.00 2226  0   128005  0.0   0.00  4.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/95      . 0.00 2096  0   55142   0.0   0.00  2.51   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/15      . 0.00 2256  0   12842   0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/151     . 0.00 2259  0   87735   0.0   0.00  3.29   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/15      . 0.00 2258  0   2685    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/17      . 0.00 2282  0   16053   0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/43      . 0.00 2270  0   30142   0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/21      . 0.00 2266  0   6790    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/361     . 0.00 2265  0   198769  0.0   0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/6       . 0.00 2241  0   876     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/3       . 0.00 31798 0   644     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/2       . 0.00 31816 0   3       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7       . 0.00 31783 0   3861    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1084
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...27)
   index usage: 19%, cache usage: 25%
   total entries stored since starting: 122567
   total entries replaced since starting: 0
   total entries expired since starting: 121434
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 568 miss
   total removes since starting: 49 hit, 60 miss
Youez - 2016 - github.com/yon3zu
LinuXploit