403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.02.33.txt
 ## swap threshold exceeded
## server overview
2025-11-20.02.33 load[2] mem[66/62] mysql[3/10] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1527         106          51         729         619
Swap:          1999        1351         648
 02:33:02 up  1:38,  0 users,  load average: 2.95, 1.24, 0.86
## system overview
top - 02:33:02 up  1:38,  0 users,  load average: 2.95, 1.24, 0.86
Tasks: 199 total,   7 running, 191 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.1 us, 12.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   125456 free,  1547872 used,   746972 buff/cache
KiB Swap:  2047996 total,   664316 free,  1383680 used.   651312 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 240316   3876 S  93.8  9.9   2:23.10 /usr/sbin+
 74663 healtho+  20   0  429916  37688   4004 S  43.8  1.6   0:00.29 php-fpm: +
 74538 healtho+  20   0  462060  69020   4060 R  37.5  2.9   0:04.16 php-fpm: +
 74721 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44256   3336   1508 S   0.0  0.1   0:08.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.70 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:07.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.34 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.42 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.76 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.89 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   3600   3280 S   0.0  0.1   0:03.10 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 S   0.0  0.0   0:00.47 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    856    492 S   0.0  0.0   0:00.82 /usr/lib/+
   477 dbus      20   0   58724   1344    624 S   0.0  0.1   0:03.17 /usr/bin/+
   486 rpc       20   0   69256    164     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1164    812 S   0.0  0.0   0:01.40 /usr/lib/+
   499 root      20   0   52852    416    320 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1376    680 S   0.0  0.1   0:04.34 /usr/sbin+
   506 root      20   0  224144   6524    952 S   0.0  0.3   0:00.13 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.13 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.17 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   4008    932 S   0.0  0.2   0:00.21 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.75 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.12 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.12 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.13 /usr/bin/+
   927 telegraf  20   0 5654048  39104   6016 S   0.0  1.6   0:03.44 /usr/loca+
   928 systuser  20   0  114016  14908   2788 S   0.0  0.6   0:01.49 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.49 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.24 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  232784   4336   2752 S   0.0  0.2   0:01.56 /usr/sbin+
   935 root      20   0  439788  11416  11208 S   0.0  0.5   0:00.29 php-fpm: +
   936 named     20   0  636992  32552   2164 S   0.0  1.3   0:04.69 /usr/sbin+
   938 root      20   0  261028   5184   1332 S   0.0  0.2   0:00.77 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:01.75 php-fpm: +
   947 root      20   0 1763312 271316   1180 S   0.0 11.2   0:14.15 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.63 /usr/sbin+
   972 root      20   0  389508    740    532 S   0.0  0.0   0:00.24 php-fpm: +
   979 cpanelc+  20   0   10348   3280   2316 S   0.0  0.1   0:04.91 /usr/loca+
   982 root      20   0  396248    716    536 S   0.0  0.0   0:00.22 php-fpm: +
   984 root      20   0  388892    620    408 S   0.0  0.0   0:00.22 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.30 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    868    292 S   0.0  0.0   0:00.62 /usr/bin/+
  1116 dovenull  20   0   46912   2488   1864 S   0.0  0.1   0:00.07 dovecot/p+
  1117 dovenull  20   0   47592   3304   2176 S   0.0  0.1   0:00.10 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.02 dovecot/a+
  1119 root      20   0   10452    628    452 S   0.0  0.0   0:00.06 dovecot/l+
  1120 dovenull  20   0   46912   2424   1828 S   0.0  0.1   0:00.11 dovecot/p+
  1121 dovenull  20   0   47336   3332   2360 S   0.0  0.1   0:00.05 dovecot/i+
  1128 root      20   0   24564   2484    520 S   0.0  0.1   0:00.06 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.04 SonarPush+
  1137 dovecot   20   0   13568    692    468 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119764   2872 S   0.0  4.9   0:03.53 /usr/loca+
  1190 dovecot   20   0   41276   1664   1040 S   0.0  0.1   0:00.19 dovecot/a+
  1258 wp-tool+  20   0  412368  32628   1836 S   0.0  1.3   0:02.06 /usr/bin/+
  1259 wp-tool+  20   0  387528  13028   1400 S   0.0  0.5   0:00.14 /usr/bin/+
  1294 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.17 dnsadmin +
  1298 root      20   0  183900   6104   2872 S   0.0  0.3   0:00.27 cpdavd - +
  1300 root      20   0  209492  12428   2560 S   0.0  0.5   0:01.64 tailwatchd
  1692 root      20   0  299272    908    528 S   0.0  0.0   0:00.15 php-fpm: +
  1709 root      38  18  130416   1436    712 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8056    772 S   0.0  0.3   0:00.62 /usr/sbin+
  1945 root      20   0   12860    428    292 S   0.0  0.0   0:00.83 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.72 /usr/loca+
  1947 root      20   0   12892    356    232 S   0.0  0.0   0:00.76 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182096  10740   1192 S   0.0  0.4   0:05.71 lfd - sle+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.10 [kworker]
  7285 root      20   0  265396 130172   3416 S   0.0  5.4   0:01.10 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 44035 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45507 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 53875 nobody    20   0  277904  21284   5136 S   0.0  0.9   0:02.52 /usr/sbin+
 57206 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59263 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60654 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 62741 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63882 nobody    20   0  277604  20052   4764 S   0.0  0.8   0:01.47 /usr/sbin+
 65032 nobody    20   0  277900  20976   4832 S   0.0  0.9   0:01.12 /usr/sbin+
 65790 nobody    20   0  277508  19924   4772 S   0.0  0.8   0:01.19 /usr/sbin+
 66055 nobody    20   0  277784  19976   4520 R   0.0  0.8   0:01.04 /usr/sbin+
 66070 nobody    20   0  277548  19956   4580 S   0.0  0.8   0:01.14 /usr/sbin+
 67061 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 68725 nobody    20   0  277760  19560   4336 S   0.0  0.8   0:00.77 /usr/sbin+
 69368 nobody    20   0  277892  19656   4396 S   0.0  0.8   0:00.69 /usr/sbin+
 69645 nobody    20   0  277772  19980   4252 S   0.0  0.8   0:00.72 /usr/sbin+
 69661 nobody    20   0  277520  19264   4080 S   0.0  0.8   0:00.80 /usr/sbin+
 69897 nobody    20   0  277636  19680   4260 S   0.0  0.8   0:00.60 /usr/sbin+
 70209 nobody    20   0  277892  19452   4156 S   0.0  0.8   0:00.59 /usr/sbin+
 70225 nobody    20   0  277764  19668   4268 S   0.0  0.8   0:00.66 /usr/sbin+
 70227 nobody    20   0  277760  19600   4120 S   0.0  0.8   0:00.55 /usr/sbin+
 71235 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71282 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71287 nobody    20   0  277576  19304   4284 S   0.0  0.8   0:00.46 /usr/sbin+
 71918 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72242 nobody    20   0  277912  19280   4132 S   0.0  0.8   0:00.33 /usr/sbin+
 72505 nobody    20   0  277904  19236   4096 S   0.0  0.8   0:00.24 /usr/sbin+
 73359 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73895 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 74155 nobody    20   0  277764  18816   3720 S   0.0  0.8   0:00.11 /usr/sbin+
 74225 nobody    20   0  277764  18692   3584 S   0.0  0.8   0:00.11 /usr/sbin+
 74250 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 74268 nobody    20   0  277764  18704   3648 S   0.0  0.8   0:00.06 /usr/sbin+
 74521 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 74527 healtho+  20   0  461548  68220   4256 S   0.0  2.8   0:05.01 php-fpm: +
 74532 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 74571 healtho+  20   0  459500  66212   4260 S   0.0  2.7   0:03.40 php-fpm: +
 74631 nobody    20   0  277328  17744   3344 S   0.0  0.7   0:00.00 /usr/sbin+
 74653 nigeria   20   0  400460   5176   2188 S   0.0  0.2   0:00.00 php-fpm: +
 74660 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 74676 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74677 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74678 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74681 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74682 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74684 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74685 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74686 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74688 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74691 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 74692 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 74694 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74695 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74696 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 74697 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 74702 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74705 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74706 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74707 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 74708 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 74718 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74720 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 74727 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 74747 cloudw    20   0  353712  15980  10496 R   0.0  0.7   0:00.01 /opt/cpan+
 74764 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 74767 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74768 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 74769 cloudsms  20   0   41516    428    264 R   0.0  0.0   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      44035  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:2]
root      45507  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:2]
root      57206  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/u200:2]
root      59263  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:1]
root      60654  0.0  0.0      0     0 ?        S    02:13   0:00  \_ [kworker/1:0]
root      62741  0.0  0.0      0     0 ?        S    02:16   0:00  \_ [kworker/0:0]
root      67061  0.0  0.0      0     0 ?        S    02:22   0:00  \_ [kworker/1:5]
root      71235  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:3]
root      71282  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/1:1]
root      71918  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/0:4]
root      73359  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44256  3336 ?        Ss   00:54   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  39500  3600 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   856 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Ss   00:54   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   164 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1164 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   416 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1376 ?        Ssl  00:54   0:04 /usr/sbin/nscd
root        506  0.0  0.2 224144  6524 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      74676  0.0  0.0 183048  2156 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74691  0.0  0.0 113284  1212 ?        Ss   02:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      74692  0.0  0.0 108052   352 ?        S    02:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      74697  0.0  0.0 113288  1520 ?        S    02:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      74770  0.0  0.0 153840  2092 ?        R    02:33   0:00  |               \_ ps auxf
root      74677  0.0  0.0 183048  2160 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74694  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      74678  0.0  0.0 183048  2160 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74707  0.0  0.0  20164   980 ?        Ss   02:33   0:00  |   \_ jailshell (cloudsms) [74767] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  74767  0.0  0.0  20164   256 ?        S    02:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  74768  0.0  0.0 113284  1212 ?        S    02:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  74769  0.0  0.6 404052 15876 ?        R    02:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root      74681  0.0  0.0 183048  2156 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74702  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      74682  0.0  0.0 183048  2152 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74706  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      74684  0.0  0.0 183048  2152 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74705  0.0  0.0  20164   808 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      74685  0.0  0.0 183048  2152 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74695  0.0  0.0  20164   804 ?        Ss   02:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      74686  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74708  0.0  0.0  20164   968 ?        Ss   02:33   0:00  |   \_ jailshell (pactpay) [74720] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74720  0.0  0.0  20164   260 ?        S    02:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74727  0.0  0.7 480124 17684 ?        S    02:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      74688  0.0  0.0 183048  2148 ?        S    02:33   0:00  \_ /usr/sbin/CROND -n
root      74696  0.0  0.0  20164   964 ?        Ss   02:33   0:00      \_ jailshell (nigeria) [74718] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74718  0.0  0.0  20164   256 ?        S    02:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74721  0.0  0.6 404052 16140 ?        S    02:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  4008 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.1  46912  2488 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  3304 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   628 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.1  46912  2424 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  3332 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.1  24564  2484 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   692 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1664 ?        S    00:54   0:00  \_ dovecot/auth
root      73895  0.0  0.1  60820  4508 ?        S    02:31   0:00  \_ dovecot/lmtp
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 39104 ?       SLsl 00:54   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14908 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.5  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.3  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.1 232784  4336 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11416 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.3 636992 32552 ?        Ssl  00:54   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  5184 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      74660  0.0  0.0      0     0 ?        Z    02:32   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  74527 33.4  2.8 461548 68220 ?        S    02:32   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  74538 29.7  2.8 462060 69020 ?        R    02:32   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  74571 30.9  2.7 459500 66212 ?        S    02:32   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   74653  0.0  0.2 400460  5176 ?        S    02:32   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  74663 14.5  1.5 429916 37688 ?        S    02:32   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        947  0.2 11.2 1763312 271316 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      74250  0.0  0.1 111304  4268 ?        Ss   02:32   0:00  \_ sshd: [accepted]
root      74521  0.0  0.1 111304  4268 ?        Ss   02:32   0:00  \_ sshd: [accepted]
root        972  0.0  0.0 389508   740 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10348  3280 ?        Rs   00:54   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   716 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   620 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  74532  0.0  0.0 445028   324 ?        S    02:32   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   868 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119764 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 130172 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32628 ?        Ss   00:54   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13028 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  4168 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.2 183900  6104 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.0  0.5 209492 12428 ?        Ss   00:54   0:01 tailwatchd
root       1692  0.0  0.0 299272   908 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1436 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.4  9.9 1462280 240316 ?      Sl   00:54   2:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8056 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12860   428 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12892   356 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    53875  0.1  0.8 277904 21284 ?        S    02:03   0:02  \_ /usr/sbin/httpd -k start
nobody    63882  0.1  0.8 277604 20052 ?        S    02:17   0:01  \_ /usr/sbin/httpd -k start
nobody    65032  0.1  0.8 277900 20976 ?        S    02:19   0:01  \_ /usr/sbin/httpd -k start
nobody    65790  0.1  0.8 277508 19924 ?        S    02:20   0:01  \_ /usr/sbin/httpd -k start
nobody    66055  0.1  0.8 277784 19976 ?        S    02:20   0:01  \_ /usr/sbin/httpd -k start
nobody    66070  0.1  0.8 277548 19956 ?        S    02:20   0:01  \_ /usr/sbin/httpd -k start
nobody    68725  0.1  0.8 277760 19560 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    74747  0.0  0.6 353712 15980 ?        S    02:33   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    69368  0.1  0.8 277892 19656 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69645  0.1  0.8 277772 19980 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69661  0.1  0.7 277520 19264 ?        S    02:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69897  0.1  0.8 277636 19680 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    70209  0.1  0.8 277892 19452 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    70225  0.1  0.8 277764 19668 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    70227  0.1  0.8 277760 19600 ?        S    02:26   0:00  \_ /usr/sbin/httpd -k start
nobody    71287  0.1  0.7 277576 19304 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody    72242  0.1  0.7 277912 19280 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    72505  0.1  0.7 277904 19236 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    74155  0.1  0.7 277764 18816 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    74225  0.2  0.7 277764 18692 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    74268  0.1  0.7 277764 18704 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
nobody    74631  0.0  0.7 277328 17744 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 182096 10740 ?        Ss   00:54   0:05 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 5925  Threads: 5  Questions: 1124756  Slow queries: 0  Opens: 3514  Flush tables: 1  Open tables: 2000  Queries per second avg: 189.832
*************************** 1. row ***************************
     Id: 16805
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 16810
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 16811
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 16819
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 129.212.183.198 TIME_WAIT
      1 142.44.225.98 TIME_WAIT
      1 152.42.189.164 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 74.50.94.11 TIME_WAIT
      1 74.7.228.23 TIME_WAIT
      1 74.7.242.40 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     28 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 02:33:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 38 minutes 39 seconds
   Server load: 2.95 1.24 0.86
   Total accesses: 37052 - Total Traffic: 775.4 MB - Total Duration: 21952044
   CPU Usage: u11.17 s4.61 cu378.29 cs281.91 - 11.4% CPU load
   6.26 requests/sec - 134.2 kB/second - 21.4 kB/request - 592.466 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KWWKKKK_W_K_____W.C..W_.K.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  71287 2/162/1817 K 1.32  3    339 1016651 66.5  1.77  33.70 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=23116769 HTTP/1.1
   1-0  72242 1/57/1567  W 1.37  0    0   936878  36.1  1.47  33.86 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=3106550573 HTTP/1.1
   2-0  72505 0/54/1575  W 0.82  0    0   900227  0.0   0.96  37.36 193.186.4.176   http/1.1 health.oyostate.gov.ng:443 GET /mandate/ HTTP/1.1
   3-0  53875 2/497/1739 K 10.03 2    390 1027863 66.3  20.08 43.09 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3591952219 HTTP/1.1
   4-0  74155 11/19/1457 K 0.44  1    262 1101817 339.9 0.54  30.73 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=2970044462 HTTP/1.1
   5-0  68725 4/136/1599 K 3.05  0    473 900292  124.1 3.32  31.65 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=3728622741 HTTP/1.1
   6-0  65790 2/295/1617 K 4.27  4    349 966150  66.3  4.89  36.31 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=3564880582 HTTP/1.1
   7-0  69897 0/159/1566 _ 2.31  1    259 858457  0.0   2.94  31.05 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=2926358219 HTTP/1.1
   8-0  74225 0/18/1500  W 0.44  0    0   879492  0.0   0.47  30.65 157.15.40.56    http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-0  63882 0/279/1514 _ 5.63  1    331 892995  0.0   6.39  30.15 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=61515928 HTTP/1.1
   10-0 69368 3/119/1343 K 2.92  4    355 791455  98.9  3.05  28.21 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=4266600765 HTTP/1.1
   11-0 66055 0/199/1520 _ 4.03  0    15  908953  0.0   4.76  33.14 52.3.155.146    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/assets/css/images/blog
   12-0 74268 0/11/1450  _ 0.21  1    270 886283  0.0   0.27  31.88 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=1667067130 HTTP/1.1
   13-0 69645 0/130/1173 _ 2.89  0    277 680675  0.0   3.03  24.21 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=2961545143 HTTP/1.1
   14-0 74631 0/3/910    _ 0.00  0    352 520751  0.0   0.01  19.68 157.15.40.56    http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   15-0 65032 0/218/1068 _ 4.47  1    360 627128  0.0   5.02  18.48 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=1718129138 HTTP/1.1
   16-0 69661 29/156/785 W 3.34  0    0   472338  136.2 3.52  17.60 152.42.189.164  http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   17-0 -     0/0/941    . 0.00  368  0   534755  0.0   0.00  18.28 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 70209 1/104/1011 C 2.33  6    358 553321  11.7  2.51  19.60 129.212.183.198 http/1.1 health.oyostate.gov.ng:443 GET /wp-login.php HTTP/1.1
   19-0 -     0/0/1039   . 0.00  375  0   609243  0.0   0.00  19.76 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/567    . 0.00  366  0   318547  0.0   0.00  11.65 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 66070 0/210/441  W 4.53  0    0   270727  0.0   5.43  10.06 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   22-0 70225 0/293/904  _ 1.77  0    0   520023  0.0   3.22  19.62 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   23-0 -     0/0/1080   . 0.00  371  0   687318  0.0   0.00  27.87 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 70227 3/107/572  K 2.25  1    0   286766  64.9  2.40  10.85 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /robots.txt HTTP/1.1
   25-0 -     0/0/821    . 0.00  372  0   505859  0.0   0.00  15.00 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/832    . 0.00  1293 0   485890  0.0   0.00  18.88 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/89     . 0.00  1360 0   74215   0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/685    . 0.00  293  0   405554  0.0   0.00  13.72 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/406    . 0.00  2821 0   261299  0.0   0.00  5.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/466    . 0.00  2037 0   294580  0.0   0.00  9.57  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/140    . 0.00  2824 0   78134   0.0   0.00  2.41  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/847    . 0.00  1881 0   527852  0.0   0.00  15.35 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/825    . 0.00  774  0   461448  0.0   0.00  18.37 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/205    . 0.00  2823 0   134815  0.0   0.00  4.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/157    . 0.00  2827 0   115547  0.0   0.00  4.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/466    . 0.00  2733 0   274598  0.0   0.00  9.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/22     . 0.00  2826 0   10578   0.0   0.00  0.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/23     . 0.00  2759 0   11684   0.0   0.00  0.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00  2760 0   15119   0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/4      . 0.00  3050 0   1340    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/115    . 0.00  2543 0   65290   0.0   0.00  3.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00  3058 0   7       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/7      . 0.00  3034 0   2574    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00  3048 0   1141    0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00  3057 0   60      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/4      . 0.00  3049 0   244     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/147    . 0.00  2503 0   75011   0.0   0.00  3.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/3      . 0.00  3051 0   77      0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 795
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...41)
   index usage: 14%, cache usage: 18%
   total entries stored since starting: 18973
   total entries replaced since starting: 0
   total entries expired since starting: 18163
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 78 miss
   total removes since starting: 15 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit